[pve-devel] [PATCH pve-manager 0/4] add vnet/localbridge permissions management

[Alexandre Derumier]

Hi,
as we has discuted some weeks ago,
this patche serie introduce management of acl for vnets && local bridges

I have reuse current sdn permissions path, to have common paths

/sdn/vnets/<zone>/<vnet>

where the local vmbr are in a virtual "local" zone

/sdn/vnets/local/<vnet>

Vlans permissions  are also handled with
/sdn/vnets/<zone>/<vnet>.<tag>

if user have permissions on the zone, he have access to all vnets/vlan
if user have permissions on the vnet, he have access to all vlans of the vnet
if user have permissions on the vnet.tag, he have access to only the specific vlan.

I have reworked the sdn zone panel from the tree, to manage permissions
on displayed vnets.

some screenshots:

https://mutulin1.odiso.net/sdnzone-perm.png
https://mutulin1.odiso.net/localzone-perm.png


patch1-2: can be applied on proxmox7, so users can already add permissions
before upgrade to proxmox8

patch3-4: add filtering the displayed local bridges (for proxmox8)

Alexandre Derumier (4):
  add vnet permissions panel
  add permissions management for "local" network zone
  api2: network: check permissions for local bridges
  api2: network: check vlan permissions for local bridges

 PVE/API2/Cluster.pm                  |  12 ++
 PVE/API2/Network.pm                  |  33 ++-
 www/manager6/Makefile                |   2 +
 www/manager6/sdn/Browser.js          |  17 +-
 www/manager6/sdn/VnetACLView.js      | 299 +++++++++++++++++++++++++++
 www/manager6/sdn/ZoneContentPanel.js |  41 ++++
 www/manager6/sdn/ZoneContentView.js  |  52 ++++-
 7 files changed, 429 insertions(+), 27 deletions(-)
 create mode 100644 www/manager6/sdn/VnetACLView.js
 create mode 100644 www/manager6/sdn/ZoneContentPanel.js

-- 
2.30.2