[pbs-devel] [PATCH proxmox-backup 0/3] job privileges

Fabian Grünbichler f.gruenbichler at proxmox.com
Fri Nov 6 11:23:06 CET 2020


this series reworks some more job privileges:

the first is a follow-up fix for verification job config privileges,
the second extends it to the corresponding 'admin/' API endpoints,
and the third is a usability improvement to allow semi-privileged users
to view/access job tasks which don't belong to them

some commit messages might need to be adapted if this gets applied after
backup at pam was replaced with root at pam in the scheduler

Fabian Grünbichler (3):
  verify: fix unprivileged verification jobs
  verify: allow unprivileged access to admin API
  tasks: allow access to job tasks

 src/api2/admin/verify.rs  | 33 ++++++++++++--
 src/api2/config/verify.rs | 92 +++++++++++++++++++++++++++------------
 src/api2/node/tasks.rs    | 74 +++++++++++++++++++++++++++++--
 src/api2/pull.rs          |  8 +++-
 src/api2/types/mod.rs     |  5 +++
 src/server/verify_job.rs  |  6 ++-
 6 files changed, 179 insertions(+), 39 deletions(-)

-- 
2.20.1






More information about the pbs-devel mailing list