[pve-devel] [PATCH RFC container] fix #1225: restore without config changes for VMUser

[Dominik Csapak]

>
> RFC because IMHO this behaviour is not optimal (for both containers and
> VMs). If a VMUser has more than one VM but no VM.Config.Options
> permission, they can effectively copy the configuration of one guest
> system (e.g. the one with the most powerful HW) to the other ones with
> Backup & Restore. If a VMAdmin changes the configuration of a guest
> system but misses an old Backup of the guest, the VMUser could also
> restore the backup and old configuration, thus undoing the change.
>
> does anyone see other options besides diffing the backed up and current
> configurations and checking the permissions for the changes? that seems
> very cumbersome and error-prone..
>

what if we only allow restore when the backup has the same configuration?

i think this would satisfy most of the users of this feature,
because giving a user only vmuser rights only makes sense if the
vm config is not updated often