From 16c8f5d71c8ce41898d56a786e5e1a6edb901241 Mon Sep 17 00:00:00 2001 From: Dietmar Maurer Date: Mon, 21 Jul 2014 09:52:01 +0200 Subject: [PATCH] Firewall/VM: add permissions --- src/PVE/API2/Firewall/VM.pm | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/PVE/API2/Firewall/VM.pm b/src/PVE/API2/Firewall/VM.pm index 63d7090..f483491 100644 --- a/src/PVE/API2/Firewall/VM.pm +++ b/src/PVE/API2/Firewall/VM.pm @@ -102,6 +102,9 @@ sub register_handlers { method => 'GET', description => "Get VM firewall options.", proxyto => 'node', + permissions => { + check => ['perm', '/vms/{vmid}', [ 'VM.Audit' ]], + }, parameters => { additionalProperties => 0, properties => { @@ -130,6 +133,9 @@ sub register_handlers { description => "Set Firewall options.", protected => 1, proxyto => 'node', + permissions => { + check => ['perm', '/vms/{vmid}', [ 'VM.Config.Network' ]], + }, parameters => { additionalProperties => 0, properties => &$add_option_properties({ @@ -241,6 +247,9 @@ sub register_handlers { path => 'refs', method => 'GET', description => "Lists possible IPSet/Alias reference which are allowed in source/dest properties.", + permissions => { + check => ['perm', '/vms/{vmid}', [ 'VM.Audit' ]], + }, parameters => { additionalProperties => 0, properties => { -- 2.39.2