[pdm-devel] applied: [PATCH datacenter-manager v3 0/3] fix #6901: allow non root users to access the EVPN dashboard

[Lukas Wagner]

On Tue Nov 4, 2025 at 11:18 AM CET, Shan Shaji wrote:
> When a non-root user tried to access the EVPN section, the API was
> returning a "403: permission check failed" error. To fix this, explicit
> permission checks have been added for the `/zones`, `/vnets`, and
> `/controllers` endpoints.
>
> Now, every authenticated user can access these endpoints however, the user
> must have at least the Resource.Audit permission under `/resource`.
> Remotes are also filtered based on the user’s access. Lists will only be
> fetched from remotes for which the user has at least the
> `Resource.Audit` permission on `/resource/{remote_name}`.
>
> History
> =======
>
> changes since v2: Thanks @Lukas
> patch: https://lore.proxmox.com/pdm-devel/DDUYO409X0BY.28PIYRXCLMUST@proxmox.com/T/#t
> - Fixed typo inside API description and commit description. 
>
> changes since v1: thanks @stefan
> patch: https://lore.proxmox.com/pdm-devel/DDKKKUCY3S4R.1FDPCH2742RY5@proxmox.com/T/#t
> - Removed unused import from vnets.rs file. 
>
>
> Shan Shaji (3):
>   fix #6901: api: add explicit permission check for controllers list
>   fix #6901: api: add explicit permission check for vnets list
>   fix #6901: api: add explicit permission check for zones list
>
>  server/src/api/sdn/controllers.rs | 30 ++++++++++++++++++++++++++----
>  server/src/api/sdn/vnets.rs       | 28 +++++++++++++++++++++++++---
>  server/src/api/sdn/zones.rs       | 28 +++++++++++++++++++++++++---
>  3 files changed, 76 insertions(+), 10 deletions(-)


applied, thanks a lot!

I quickly followed up with a patch fixing some trivial clippy warnings,
see [1].

[1] https://git.proxmox.com/?p=proxmox-datacenter-manager.git;a=commitdiff;h=db9f42aa87711ba5ff18ef3454a453f97a4027d9