[pve-devel] [PATCH access-control/manager/docs 0/9] close #2809: replication: add dedicated VM.Replicate privilege

Fiona Ebner f.ebner at proxmox.com
Fri Jul 18 11:30:06 CEST 2025


Currently, guest replication is guarded with Datastore.Allocate on
'/storage', which is rather surprising. One could require
Datastore.AllocateSpace on all involved storages, but having a
dedicated privilege like for other VM operations like migration and
snapshot seems to be more natural.

Manager patches 2/9 to 7/9 can be applied independently.

New manager depends on new access-control.

access-control:

Fiona Ebner (1):
  add VM.Replicate privilege

 src/PVE/AccessControl.pm | 1 +
 src/test/perm-test1.pl   | 8 ++++----
 2 files changed, 5 insertions(+), 4 deletions(-)


manager:

Fiona Ebner (7):
  api: replication: code style: order module imports
  api: replication: add missing module imports
  api: replication config: code style: order module imports
  api: replication config: add missing module imports
  api: replication config: remove dead code
  api: replication: fix usages of RPCEnvironment check method
  close #2809: api: replication: use VM.Replicate privilege

 PVE/API2/Replication.pm       | 38 ++++++++++++++++++-------------
 PVE/API2/ReplicationConfig.pm | 42 ++++++++++++++++++++++++++---------
 2 files changed, 54 insertions(+), 26 deletions(-)


docs:

Fiona Ebner (1):
  user management: privileges: document VM.Replicate privilege

 pveum.adoc | 1 +
 1 file changed, 1 insertion(+)


Summary over all repositories:
  5 files changed, 60 insertions(+), 30 deletions(-)

-- 
Generated by git-murpp 0.5.0




More information about the pve-devel mailing list