[pmg-devel] applied: [PATCH pmg-api] fix #5367 api: sa-custom-score: add missing permissions to api-calls

[Thomas Lamprecht]

On Fri, 26 Sep 2025 20:43:27 +0200, Stoiko Ivanov wrote:
> It seems we never added permission properties for the CRUD api calls,
> for SpamAssassin custom scores. This results in them being available
> only to root at pam.
> 
> OTOH the reverting (by deleting the shadow-file), applying (by
> moving the shadow-file in place and restarting pmg-smtp-filter) was
> available to all admin users, and listing all configured scores was
> available to all 'admin' and 'audit' users.
> 
> [...]

Applied, thanks!

[1/1] fix #5367 api: sa-custom-score: add missing permissions to api-calls
      commit: e2d9102271a97c16f6376448fc36dfa29b757e9a