[pve-devel] [PATCH v6 access-control 1/1] privs: add Sys.Incoming

Fabian Grünbichler f.gruenbichler at proxmox.com
Wed Sep 28 14:50:47 CEST 2022


for guarding cross-cluster data streams like guest migrations and
storage migrations.

Signed-off-by: Fabian Grünbichler <f.gruenbichler at proxmox.com>
---
 src/PVE/AccessControl.pm | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/PVE/AccessControl.pm b/src/PVE/AccessControl.pm
index c32dcc3..2dcb897 100644
--- a/src/PVE/AccessControl.pm
+++ b/src/PVE/AccessControl.pm
@@ -1022,6 +1022,7 @@ my $privgroups = {
 	root => [
 	    'Sys.PowerMgmt',
 	    'Sys.Modify', # edit/change node settings
+	    'Sys.Incoming', # incoming storage/guest migrations
 	],
 	admin => [
 	    'Permissions.Modify',
-- 
2.30.2






More information about the pve-devel mailing list