[pve-devel] user rights

[Dietmar Maurer]

> > Sure, but our permission works on resources (VMs, Storages), not on API paths.
> >
> > For example /cluster/resources simply lists all resources you have
> > access to (VM.Audit or VMs, Datastore.Audit for storage).
> 
> Ah sorry didn't know that. It looked like it is path based. Sorry for that.

Well, we use paths to specify resources, for example /vms/100 or /storage/test.
But we do not use the API access path to restrict the API call itself.

Hope I did not confused you totally now ;-)