[PATCH storage 1/4] pvesm: extractconfig: allow access for Datastore.Allocate

[Fiona Ebner <f.ebner@proxmox.com>]

The check_volume_access() call checks that the user has 'VM.Backup'
for the owning guest's ID or 'Datastore.Allocate' for the storage. The
latter is the highest possible storage permission. Consider that
enough to extract the configuration even without an explicit
'VM.Backup' permission.

Note that for restoring a backup, only the check_volume_access() call
is used. So this change also better aligns the checks.

Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
---
 src/PVE/CLI/pvesm.pm | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/PVE/CLI/pvesm.pm b/src/PVE/CLI/pvesm.pm
index 1aaa9f3..4b42734 100755
--- a/src/PVE/CLI/pvesm.pm
+++ b/src/PVE/CLI/pvesm.pm
@@ -187,7 +187,6 @@ __PACKAGE__->register_method({
             if (!defined($ownervm)) {
                 die "unable to extract configuration for '$volume' - not a guest backup\n";
             }
-            $rpcenv->check($authuser, "/vms/$ownervm", ['VM.Backup']);
         }
 
         my $config_raw = PVE::Storage::extract_vzdump_config($storage_cfg, $volume);
-- 
2.47.3