use vm create permissions for templates

Signed-off-by: Stefan Priebe <s.priebe@profihost.ag>

diff --git a/PVE/API2/Qemu.pm b/PVE/API2/Qemu.pm
index d8076934f46b117b2d018fd07a71bca86be020c4..ee77479839f3f7cf767d5389c3c2c644967caf01 100644 (file)
--- a/PVE/API2/Qemu.pm
+++ b/PVE/API2/Qemu.pm
@@ -2351,6 +2351,13 @@ __PACKAGE__->register_method({
     protected => 1,
     proxyto => 'node',
     description => "Create a Template.",
+    permissions => {
+       description => "You need 'VM.Allocate' permissions on /vms/{vmid} or on the VM pool /pool/{pool}. If you create disks you need 'Datastore.AllocateSpace' on any used storage.",
+       check => [ 'or', 
+                  [ 'perm', '/vms/{vmid}', ['VM.Allocate']],
+                  [ 'perm', '/pool/{pool}', ['VM.Allocate'], require_param => 'pool'],
+           ],
+    },
     parameters => {
        additionalProperties => 0,
        properties => {