projects
/
pve-firewall.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (parent:
a34cfdd
)
Firewall/Cluster: add permissions
author
Dietmar Maurer
<dietmar@proxmox.com>
Mon, 21 Jul 2014 07:33:18 +0000
(09:33 +0200)
committer
Dietmar Maurer
<dietmar@proxmox.com>
Mon, 21 Jul 2014 07:33:18 +0000
(09:33 +0200)
src/PVE/API2/Firewall/Cluster.pm
patch
|
blob
|
blame
|
history
diff --git
a/src/PVE/API2/Firewall/Cluster.pm
b/src/PVE/API2/Firewall/Cluster.pm
index e8b44d2f6568b06a9764d4c9b93021790f1d4d8b..0f6b98cea2fffcef505707e0c20bf9eca354213c 100644
(file)
--- a/
src/PVE/API2/Firewall/Cluster.pm
+++ b/
src/PVE/API2/Firewall/Cluster.pm
@@
-106,6
+106,9
@@
__PACKAGE__->register_method({
path => 'options',
method => 'GET',
description => "Get Firewall options.",
path => 'options',
method => 'GET',
description => "Get Firewall options.",
+ permissions => {
+ check => ['perm', '/', [ 'Sys.Audit' ]],
+ },
parameters => {
additionalProperties => 0,
},
parameters => {
additionalProperties => 0,
},
@@
-129,6
+132,9
@@
__PACKAGE__->register_method({
method => 'PUT',
description => "Set Firewall options.",
protected => 1,
method => 'PUT',
description => "Set Firewall options.",
protected => 1,
+ permissions => {
+ check => ['perm', '/', [ 'Sys.Modify' ]],
+ },
parameters => {
additionalProperties => 0,
properties => &$add_option_properties({
parameters => {
additionalProperties => 0,
properties => &$add_option_properties({
@@
-176,6
+182,7
@@
__PACKAGE__->register_method({
path => 'macros',
method => 'GET',
description => "List available macros",
path => 'macros',
method => 'GET',
description => "List available macros",
+ permissions => { user => 'all' },
parameters => {
additionalProperties => 0,
},
parameters => {
additionalProperties => 0,
},
@@
-214,6
+221,9
@@
__PACKAGE__->register_method({
path => 'refs',
method => 'GET',
description => "Lists possible IPSet/Alias reference which are allowed in source/dest properties.",
path => 'refs',
method => 'GET',
description => "Lists possible IPSet/Alias reference which are allowed in source/dest properties.",
+ permissions => {
+ check => ['perm', '/', [ 'Sys.Audit' ]],
+ },
parameters => {
additionalProperties => 0,
properties => {
parameters => {
additionalProperties => 0,
properties => {