From: Dietmar Maurer <dietmar@proxmox.com>
Date: Thu, 9 Feb 2012 10:26:37 +0000 (+0100)
Subject: do not allow to change system user passwords
X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=commitdiff_plain;h=59321f2682707b6447bb4bdd3ba91f93c45394e6

do not allow to change system user passwords
---

diff --git a/PVE/API2/AccessControl.pm b/PVE/API2/AccessControl.pm
index a3829fd..0ef31fa 100644
--- a/PVE/API2/AccessControl.pm
+++ b/PVE/API2/AccessControl.pm
@@ -260,6 +260,8 @@ __PACKAGE__->register_method ({
 	    } else {
 		# only root may change root password
 		raise_perm_exc() if $userid eq 'root@pam';
+		# do not allow to change system user passwords
+		raise_perm_exc() if $realm eq 'pam';
 	    }
 	}