[pbs-devel] [PATCH proxmox-backup 04/15] api2/tape: add missing protected to some api calls

[Dominik Csapak]

On 1/27/21 6:47 PM, Dietmar Maurer wrote:
> 
>> On 01/27/2021 11:33 AM Dominik Csapak <d.csapak at proxmox.com> wrote:
>>
>>   
>> they need root permission either to access the changer/drive or to
>> modify the config
> 
> This looks wrong to me. Most thing can/need to be done as user 'backup', especially the 'backup' API. Running backup as root user is wrong.
> 

ok for some things you're right, i had weird permissions on

/var/lib/proxmox-backup/tape

(for some reason it had no execute bit set..)

but if i omit the protected option, i can barely do anything
media/drive/changer listing works, but a backup
fails with:


2021-01-28T09:03:17+01:00: update media online status
2021-01-28T09:03:17+01:00: TASK ERROR: Permission denied (os error 13)

i did not find out yet where the problem is, but i'm on it