[pbs-devel] [PATCH proxmox-backup] add datastore info api call
Oguz Bektas
o.bektas at proxmox.com
Thu Oct 22 13:35:35 CEST 2020
On Thu, Oct 22, 2020 at 01:00:48PM +0200, Fabian Grünbichler wrote:
> On October 22, 2020 11:17 am, Oguz Bektas wrote:
> > hi,
> >
> > On Thu, Oct 22, 2020 at 10:02:23AM +0200, Fabian Grünbichler wrote:
> >>
> >> why READ and not AUDIT | BACKUP ? why partial if you only pass a single
> >> privilege?
> >
> > i thought the minimum privilege should be view. one might want to add a
> > datastore where only read access is given to them, to be able to restore
> > backups from it for example. imposing audit/backup privs would prevent
> > this, afaict
>
> AUDIT is the permission that determines visibility of a datastore, READ
> is the permission to read its *contents*. this api call is not related
> to reading arbitrary datastore contents, so it should not require that
> permission.
i see, it's clear now thanks
>
>
> _______________________________________________
> pbs-devel mailing list
> pbs-devel at lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel
More information about the pbs-devel
mailing list