Firewall/Host: add permissions

diff --git a/src/PVE/API2/Firewall/Host.pm b/src/PVE/API2/Firewall/Host.pm
index fa5a176d58991d13b1a963065d86196b87e94454..37a63b7035c28c0dbac7a0e5a99509d52cf4299d 100644 (file)
--- a/src/PVE/API2/Firewall/Host.pm
+++ b/src/PVE/API2/Firewall/Host.pm
@@ -104,6 +104,9 @@ __PACKAGE__->register_method({
     method => 'GET',
     description => "Get host firewall options.",
     proxyto => 'node',
+    permissions => {
+       check => ['perm', '/nodes/{node}', [ 'Sys.Audit' ]],
+    },
     parameters => {
        additionalProperties => 0,
        properties => {
@@ -130,6 +133,9 @@ __PACKAGE__->register_method({
     description => "Set Firewall options.",
     protected => 1,
     proxyto => 'node',
+    permissions => {
+       check => ['perm', '/nodes/{node}', [ 'Sys.Modify' ]],
+    },
     parameters => {
        additionalProperties => 0,
        properties => &$add_option_properties({