add permissions for backup API

[pve-manager.git] / PVE / API2 / Backup.pm

diff --git a/PVE/API2/Backup.pm b/PVE/API2/Backup.pm
index d9cbd916c3c3e2026db830e3f4bc4b1f4d3d9928..8e1f34e615762cc86569e3c8e97eb5af37f6b0a6 100644 (file)
--- a/PVE/API2/Backup.pm
+++ b/PVE/API2/Backup.pm
@@ -191,6 +191,9 @@ __PACKAGE__->register_method({
     path => '', 
     method => 'GET',
     description => "List vzdump backup schedule.",
+    permissions => {
+       check => ['perm', '/', ['Sys.Audit']],
+    },
     parameters => {
        additionalProperties => 0,
        properties => {},
@@ -224,6 +227,9 @@ __PACKAGE__->register_method({
     method => 'POST',
     protected => 1,
     description => "Create new vzdump backup job.",
+    permissions => {
+       check => ['perm', '/', ['Sys.Modify']],
+    },
     parameters => {
        additionalProperties => 0,
        properties => PVE::VZDump::json_config_properties({
@@ -266,6 +272,9 @@ __PACKAGE__->register_method({
     path => '{id}', 
     method => 'GET',
     description => "Read vzdump backup job definition.",
+    permissions => {
+       check => ['perm', '/', ['Sys.Audit']],
+    },
     parameters => {
        additionalProperties => 0,
        properties => {
@@ -302,6 +311,9 @@ __PACKAGE__->register_method({
     path => '{id}', 
     method => 'DELETE',
     description => "Delete vzdump backup job definition.",
+    permissions => {
+       check => ['perm', '/', ['Sys.Modify']],
+    },
     protected => 1,
     parameters => {
        additionalProperties => 0,
@@ -349,6 +361,9 @@ __PACKAGE__->register_method({
     method => 'PUT',
     protected => 1,
     description => "Update vzdump backup job definition.",
+    permissions => {
+       check => ['perm', '/', ['Sys.Modify']],
+    },
     parameters => {
        additionalProperties => 0,
        properties => PVE::VZDump::json_config_properties({