[pve-devel] [PATCH access-control 1/2] acl: allow more nesting for /mapping acl paths

[Lukas Wagner]

This will be needed for ACL paths for the notification system,
which will get separate namespaces for targets and matchers:

/mapping/notification/targets/<name>
as well as
/mapping/notification/matchers/<name>

Signed-off-by: Lukas Wagner <l.wagner at proxmox.com>
---
 src/PVE/AccessControl.pm | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/PVE/AccessControl.pm b/src/PVE/AccessControl.pm
index cc0f00b..22aef69 100644
--- a/src/PVE/AccessControl.pm
+++ b/src/PVE/AccessControl.pm
@@ -1277,6 +1277,7 @@ sub check_path {
 	|/mapping
 	|/mapping/[[:alnum:]\.\-\_]+
 	|/mapping/[[:alnum:]\.\-\_]+/[[:alnum:]\.\-\_]+
+	|/mapping/[[:alnum:]\.\-\_]+/[[:alnum:]\.\-\_]+/[[:alnum:]\.\-\_]+
     )$!xs;
 }
 
-- 
2.39.2