From: "Fabian Grünbichler" <f.gruenbichler@proxmox.com>
To: pbs-devel@lists.proxmox.com
Subject: [pbs-devel] [PATCH proxmox-backup 0/3] job privileges
Date: Fri, 6 Nov 2020 11:23:06 +0100 [thread overview]
Message-ID: <20201106102309.1458959-1-f.gruenbichler@proxmox.com> (raw)
this series reworks some more job privileges:
the first is a follow-up fix for verification job config privileges,
the second extends it to the corresponding 'admin/' API endpoints,
and the third is a usability improvement to allow semi-privileged users
to view/access job tasks which don't belong to them
some commit messages might need to be adapted if this gets applied after
backup@pam was replaced with root@pam in the scheduler
Fabian Grünbichler (3):
verify: fix unprivileged verification jobs
verify: allow unprivileged access to admin API
tasks: allow access to job tasks
src/api2/admin/verify.rs | 33 ++++++++++++--
src/api2/config/verify.rs | 92 +++++++++++++++++++++++++++------------
src/api2/node/tasks.rs | 74 +++++++++++++++++++++++++++++--
src/api2/pull.rs | 8 +++-
src/api2/types/mod.rs | 5 +++
src/server/verify_job.rs | 6 ++-
6 files changed, 179 insertions(+), 39 deletions(-)
--
2.20.1
next reply other threads:[~2020-11-06 10:23 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-11-06 10:23 Fabian Grünbichler [this message]
2020-11-06 10:23 ` [pbs-devel] [PATCH proxmox-backup 1/3] verify: fix unprivileged verification jobs Fabian Grünbichler
2020-11-06 10:23 ` [pbs-devel] [PATCH proxmox-backup 2/3] verify: allow unprivileged access to admin API Fabian Grünbichler
2020-11-06 10:23 ` [pbs-devel] [PATCH proxmox-backup 3/3] tasks: allow access to job tasks Fabian Grünbichler
2020-11-06 11:56 ` [pbs-devel] applied: [PATCH proxmox-backup 0/3] job privileges Dietmar Maurer
2020-11-06 12:06 ` [pbs-devel] applied: " Dietmar Maurer
2020-11-06 12:11 ` Dietmar Maurer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20201106102309.1458959-1-f.gruenbichler@proxmox.com \
--to=f.gruenbichler@proxmox.com \
--cc=pbs-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.