From: Dietmar Maurer <dietmar@proxmox.com>
Date: Tue, 26 Nov 2013 06:50:20 +0000 (+0100)
Subject: allow dots in access paths
X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=commitdiff_plain;h=e4f8fc2e7e5f31691629a5361000636f8a2b2398;hp=fe2defd9d52b236b2c69498b2bf7d3be501a8462

allow dots in access paths

Because storage IDs may contain dots.
---

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 236efac..f03f6b5 100644
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -543,7 +543,7 @@ sub normalize_path {
 
     $path = "/$path" if $path !~ m|^/|;
 
-    return undef if $path !~ m|^[[:alnum:]\-\_\/]+$|;
+    return undef if $path !~ m|^[[:alnum:]\.\-\_\/]+$|;
 
     return $path;
 } 
diff --git a/changelog.Debian b/changelog.Debian
index 2db7133..c63bdb3 100644
--- a/changelog.Debian
+++ b/changelog.Debian
@@ -1,6 +1,8 @@
 libpve-access-control (3.0-9) unstable; urgency=low
 
   * prevent user enumeration attacks
+  
+  * allow dots in access paths
 
  -- Proxmox Support Team <support@proxmox.com>  Mon, 18 Nov 2013 09:06:38 +0100