[pve-devel] applied: [PATCH v3 access-control 11/20] API token: implement permission checks

Thomas Lamprecht t.lamprecht at proxmox.com
Wed Jan 29 21:42:32 CET 2020


On 1/21/20 1:54 PM, Fabian Grünbichler wrote:
> non-privsep tokens will always return the roles/permissions of their
> associated users. privsep tokens will return unfiltered roles, but
> filtered permissions.
> 
> Signed-off-by: Fabian Grünbichler <f.gruenbichler at proxmox.com>
> ---
> 
> Notes:
>     v1->v2:
>     - fix for root at pam tokens
> 
>  PVE/AccessControl.pm  | 30 ++++++++++++++++++++++++++++++
>  PVE/RPCEnvironment.pm | 27 +++++++++++++++++++++++++--
>  2 files changed, 55 insertions(+), 2 deletions(-)
> 

applied, thanks!





More information about the pve-devel mailing list