[pve-devel] [PATCH qemu-server] restrict monitor API call to Sys.Modify

[Dietmar Maurer]

> On Mon, Nov 07, 2016 at 08:37:45AM +0100, Wolfgang Link wrote:
> > We could restrict the monitor to the info commands, then they give only
> > information about this VM and can't change the setting of it.
> 
> What about a combined approach?
> 
> - user only has VM.Monitor -> user can only use "info *" commands
> - user has Sys.Modify -> user can use arbitrary commands

make sense to me