From mboxrd@z Thu Jan 1 00:00:00 1970
Return-Path: <f.ebner@proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits))
(No client certificate requested)
by lists.proxmox.com (Postfix) with ESMTPS id 4522A67AE5
for <pbs-devel@lists.proxmox.com>; Tue, 10 Nov 2020 13:33:55 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
by firstgate.proxmox.com (Proxmox) with ESMTP id 388492087B
for <pbs-devel@lists.proxmox.com>; Tue, 10 Nov 2020 13:33:25 +0100 (CET)
Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com
[212.186.127.180])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits))
(No client certificate requested)
by firstgate.proxmox.com (Proxmox) with ESMTPS id 5399320871
for <pbs-devel@lists.proxmox.com>; Tue, 10 Nov 2020 13:33:24 +0100 (CET)
Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1])
by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 20D9E46063
for <pbs-devel@lists.proxmox.com>; Tue, 10 Nov 2020 13:33:24 +0100 (CET)
From: Fabian Ebner <f.ebner@proxmox.com>
To: pbs-devel@lists.proxmox.com
Date: Tue, 10 Nov 2020 13:33:20 +0100
Message-Id: <20201110123320.19368-1-f.ebner@proxmox.com>
X-Mailer: git-send-email 2.20.1
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-SPAM-LEVEL: Spam detection results: 0
AWL -0.026 Adjusted score from AWL reputation of From: address
KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
RCVD_IN_DNSWL_MED -2.3 Sender listed at https://www.dnswl.org/,
medium trust
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
SPF_PASS -0.001 SPF: sender matches SPF record
URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more
information. [datastore.read]
Subject: [pbs-devel] [PATCH proxmox-backup] docs: user management: avoid
some inconsistencies
X-BeenThere: pbs-devel@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox Backup Server development discussion
<pbs-devel.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pbs-devel>,
<mailto:pbs-devel-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pbs-devel/>
List-Post: <mailto:pbs-devel@lists.proxmox.com>
List-Help: <mailto:pbs-devel-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel>,
<mailto:pbs-devel-request@lists.proxmox.com?subject=subscribe>
X-List-Received-Date: Tue, 10 Nov 2020 12:33:55 -0000
The space between '--' and 'path' in two of the commands was wrong. The other
changes make the names of the store and token consistent with the rest of the
section and should improve readability.
Also add the Datastore.Verify permission in the output of the command:
proxmox-backup-manager user permissions john@pbs --path /datastore/store1
A DatastoreAdmin now has this permission and that's what john@pbs is in the
example.
Signed-off-by: Fabian Ebner <f.ebner@proxmox.com>
---
docs/user-management.rst | 15 ++++++++-------
1 file changed, 8 insertions(+), 7 deletions(-)
diff --git a/docs/user-management.rst b/docs/user-management.rst
index 06348917..fc849dde 100644
--- a/docs/user-management.rst
+++ b/docs/user-management.rst
@@ -230,11 +230,11 @@ You can list the ACLs of each user/token using the following command:
.. code-block:: console
# proxmox-backup-manager acl list
- ┌──────────┬──────────────────┬───────────┬────────────────┐
- │ ugid │ path │ propagate │ roleid │
- ╞══════════╪══════════════════╪═══════════╪════════════════╡
- │ john@pbs │ /datastore/disk1 │ 1 │ DatastoreAdmin │
- └──────────┴──────────────────┴───────────┴────────────────┘
+ ┌──────────┬───────────────────┬───────────┬────────────────┐
+ │ ugid │ path │ propagate │ roleid │
+ ╞══════════╪═══════════════════╪═══════════╪════════════════╡
+ │ john@pbs │ /datastore/store1 │ 1 │ DatastoreAdmin │
+ └──────────┴───────────────────┴───────────┴────────────────┘
A single user/token can be assigned multiple permission sets for different datastores.
@@ -267,7 +267,7 @@ you can use the ``proxmox-backup-manager user permission`` command:
.. code-block:: console
- # proxmox-backup-manager user permissions john@pbs -- path /datastore/store1
+ # proxmox-backup-manager user permissions john@pbs --path /datastore/store1
Privileges with (*) have the propagate flag set
Path: /datastore/store1
@@ -276,9 +276,10 @@ you can use the ``proxmox-backup-manager user permission`` command:
- Datastore.Modify (*)
- Datastore.Prune (*)
- Datastore.Read (*)
+ - Datastore.Verify (*)
# proxmox-backup-manager acl update /datastore/store1 DatastoreBackup --auth-id 'john@pbs!client1'
- # proxmox-backup-manager user permissions 'john@pbs!test' -- path /datastore/store1
+ # proxmox-backup-manager user permissions 'john@pbs!client1' --path /datastore/store1
Privileges with (*) have the propagate flag set
Path: /datastore/store1
--
2.20.1