[pve-devel] applied: [PATCH container] allow reading snapshot config for VM.Audit

Thomas Lamprecht t.lamprecht at proxmox.com
Fri Jan 31 20:39:49 CET 2020


On 1/31/20 11:40 AM, Dominik Csapak wrote:
> VM.Audit can see the current config and the list of snapshots
> already, so there is no real reason to disallow
> the config of snapshots
> 
> Signed-off-by: Dominik Csapak <d.csapak at proxmox.com>
> ---
>  src/PVE/API2/LXC/Snapshot.pm | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/src/PVE/API2/LXC/Snapshot.pm b/src/PVE/API2/LXC/Snapshot.pm
> index 8ae5688..160e5eb 100644
> --- a/src/PVE/API2/LXC/Snapshot.pm
> +++ b/src/PVE/API2/LXC/Snapshot.pm
> @@ -352,7 +352,7 @@ __PACKAGE__->register_method({
>      proxyto => 'node',
>      description => "Get snapshot configuration",
>      permissions => {
> -	check => ['perm', '/vms/{vmid}', [ 'VM.Snapshot', 'VM.Snapshot.Rollback' ], any => 1],
> +	check => ['perm', '/vms/{vmid}', [ 'VM.Snapshot', 'VM.Snapshot.Rollback', 'VM.Audit' ], any => 1],
>      },
>      parameters => {
>  	additionalProperties => 0,
> 

applied, thanks!




More information about the pve-devel mailing list