[pbs-devel] [PATCH proxmox-backup 0/5] ACL removal on user/token deletion + token regeneration

Hannes Laimer h.laimer at proxmox.com
Tue Dec 20 15:57:09 CET 2022


If a user is deleted all its permissions and tokens
will now be deleted with it. If a token is deleted
all its permissions will now be deleted.
Until now neither of those two happened[1].
The last two commits add the possibility to regenerate
tokens, basically revoking the old and generating a
new secret while keeping all the set permissions.

This is all in the same series since just adding the
removal of permissions would kill the currently only
way to keep the permissions but change the secret of
a token(deleting it and creating it again with the
same name[2]).

[1] https://bugzilla.proxmox.com/show_bug.cgi?id=4382
[2] https://bugzilla.proxmox.com/show_bug.cgi?id=3887

Hannes Laimer (5):
  pbs-config: add delete_authid to ACL-tree
  fix #4382: api2: remove permissions of token on deletion
  fix #4382: api2: remove permissions and tokens of user on deletion
  fix #3887: api2: add regenerate token endpoint
  fix #3887: ui: add regenerate token button

 pbs-config/src/acl.rs   | 71 +++++++++++++++++++++++++++++++
 src/api2/access/user.rs | 92 +++++++++++++++++++++++++++++++++++++++--
 www/config/TokenView.js | 30 ++++++++++++++
 3 files changed, 190 insertions(+), 3 deletions(-)

-- 
2.30.2






More information about the pbs-devel mailing list