[pbs-devel] [PATCH proxmox-backup] add datastore info api call

Oguz Bektas o.bektas at proxmox.com
Thu Oct 22 13:35:35 CEST 2020


On Thu, Oct 22, 2020 at 01:00:48PM +0200, Fabian Grünbichler wrote:
> On October 22, 2020 11:17 am, Oguz Bektas wrote:
> > hi,
> > 
> > On Thu, Oct 22, 2020 at 10:02:23AM +0200, Fabian Grünbichler wrote:
> >> 
> >> why READ and not AUDIT | BACKUP ? why partial if you only pass a single 
> >> privilege?
> > 
> > i thought the minimum privilege should be view. one might want to add a
> > datastore where only read access is given to them, to be able to restore
> > backups from it for example. imposing audit/backup privs would prevent
> > this, afaict
> 
> AUDIT is the permission that determines visibility of a datastore, READ 
> is the permission to read its *contents*. this api call is not related 
> to reading arbitrary datastore contents, so it should not require that 
> permission.

i see, it's clear now thanks

> 
> 
> _______________________________________________
> pbs-devel mailing list
> pbs-devel at lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel





More information about the pbs-devel mailing list