From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [IPv6:2a0f:8001:1:32::40]) by lore.proxmox.com (Postfix) with ESMTPS id 3985E1FF0AD for ; Fri, 21 Aug 2026 10:44:46 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id 23E2C215C4; Fri, 21 Aug 2026 10:44:43 +0200 (CEST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=WtF1YxolvzHAii9Ysi6Jm0hpVaKOt3I/+1phytirLbRUGR+SbmR5S0o3T1/ZpBGxKEbLLr5++4rwEWa0zQ4+2VXLiWxOJwo2mcPxIwJ/ZkE9ythzF9pc3hEE+6kU8zEmm8z1hIgRiqcrsbuOvI4O/3jrguxhMoO6jABftVxX93ucpbHIkhkcpiyGRRAHyfixLAiND7lHVYtLcxIotMI+8gJLN6LZUKHJdaihHbpj7JNtBCYNPSNi7ee0X0F61+Ey0a8WN5bskcr3ze7cvJpE6yoaB2/XiF5ClF+A3em/9knuHwe7KsvIvkCe7It0hoR328FjTM3cPVFB64M5xMbYhA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=8TAZa2qzsMibbyJOmEvxQ0a2cYKijZRAfRPgP5QHa3Y=; b=puAKppk9tHXY/DF057olPyKTnSimrH1gsJKzZRgeFdEVR0Rf5Dr4uN5COOmSWEM4duYjrlMmkOtQ4JtH+R6j15pOXlHEDqsg7r99KFmOphf6SvOdHL8dIPJjsm49e0iPc9V8q20b6E95yxAcvfRwdsv0NvIXSJkuHmpUtQvB40AdQ4sA44bY8F4gosCH9YHyUdDuCy0uciyJD6DYmGCT67/ed713G+Z7hMNLXThcw9I04jwMJLwOOT2Qvs5tN7Ibgm1ZK/AgCCLdfQ3HUhoLxMaybi6bQbvzZM4aF2r5MpRjYQYCnDProYv2QJbna+9JekqxH4MbNIj8e2t9dixTMw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=neverhack.com; dmarc=pass action=none header.from=neverhack.com; dkim=pass header.d=neverhack.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neverhack.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8TAZa2qzsMibbyJOmEvxQ0a2cYKijZRAfRPgP5QHa3Y=; b=jIosodHWj9e6iEZVmRgXvY+LI0QtBE2yO1e1GXP0X2oEWnDgjsyUEzvV85+ofkMWODOOU/tTnvVJ1dPLKtt/5cdtfIVjkJeMtUw1DAc6Owp1fSicl5huy6+06IyideQr2SiVzFXp/HZZjhiEuX1gqhkLRcoBlZLAfwxEzWNCad7hVZjatV9wzqkFTTvnEtdC8h0LJFbswalmcvPT3YvfGfPHKZJUqjIllYiWqG0+JMy3iu3aP4VK1L+LpV0IoNLBkPPJgW+d6XTiydoRVob2q84iEaS3jNaqPyeSNDVXJ0sgI4j1hI1lzWgwDya04Lbl0+t7wPzrDRtepqoUxD6CVA== From: =?iso-8859-1?Q?Jean-L=E9on_CUSINATO?= To: "pve-devel@lists.proxmox.com" Subject: bug #7864: pool-scoped VM create with tags still broken. Could someone pick up the patch? Thread-Topic: bug #7864: pool-scoped VM create with tags still broken. Could someone pick up the patch? Thread-Index: AQHdMUVTnei9YDd/I0CHgw6iUxlwyA== Date: Fri, 21 Aug 2026 08:29:40 +0000 Message-ID: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_87980497-c6de-4078-8a89-99858a78bed4_Enabled=True;MSIP_Label_87980497-c6de-4078-8a89-99858a78bed4_SiteId=b83e978f-c31e-42ee-9b78-c60e657e1792;MSIP_Label_87980497-c6de-4078-8a89-99858a78bed4_SetDate=2026-08-21T08:29:39.708Z;MSIP_Label_87980497-c6de-4078-8a89-99858a78bed4_Name=C0 - Public;MSIP_Label_87980497-c6de-4078-8a89-99858a78bed4_ContentBits=1;MSIP_Label_87980497-c6de-4078-8a89-99858a78bed4_Method=Standard; authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=neverhack.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: MR1PPF2CB85BE05:EE_|MRYP264MB6382:EE_ x-ms-office365-filtering-correlation-id: 81e9800e-95a3-4aa0-6ac5-08deff5e57f2 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|23010399003|376014|56012099006|10067099003|18002099003|11063799006|5023799004|8096899003|38070700021; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MR1PPF2CB85BE05.FRAP264.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(23010399003)(376014)(56012099006)(10067099003)(18002099003)(11063799006)(5023799004)(8096899003)(38070700021);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?tKi3u8DZyjihg5I1h9QvGvUN+11tFN0dnsBlHd8VghKctbWGw0jxIylKI4?= =?iso-8859-1?Q?8/lJBGACWhQIhN/0CoOThdnmDmrr3UL+r3m1Z9dWZqqvRNfYyleANt685v?= =?iso-8859-1?Q?cjoZl//DeLi5OEXlZ1dlmLcB4qFglrSxGHq/Tyrl3HOga6/qo6c9CVHZTY?= =?iso-8859-1?Q?tfjC5sym242M+j2MoNk7wPcnzrEuixnEKgwrZZM46az0CLAOthpLB/J6o9?= =?iso-8859-1?Q?cr/V308U7W3Go49UHLizqDmPEno35LGu0a+MvwLJwtgGKAAy2q0uo3ssPP?= =?iso-8859-1?Q?0TUigiu+9y6LoR5f5Vl+QgzHs4APerrF3cTZanZVr8dn+15MgCJxMw3gRW?= =?iso-8859-1?Q?mPNN5R8aZ583pS0wLGKwQmmVHMvyAlGwBk1Ik4bMhZFJGf230BV6GrRMad?= =?iso-8859-1?Q?ar+yQWUpWPDyhyYAXpgk6NaqkJS2iTZ05dWIlQPqeMIP94xB6j+yInVX/c?= =?iso-8859-1?Q?1vMO8JSeScURcYEZIEEwqvZF6affDRPm2g5Ihs9iDa+ZMreiG6Kek1FooR?= =?iso-8859-1?Q?uVDK2Y6vAMGjBwAyDvlc0TsXENtRwlwSSCJB/O8X29GHnQPYBm6D2LM/qr?= =?iso-8859-1?Q?qWgfUYwLFSGiOTTl/RV/5yBXK+/hkmaT79WR2TO4ek1tm/LUgTYqK7e/Cv?= =?iso-8859-1?Q?upgnvSJO0RUeTFsLWFGr1thn7HIXzUxzo4x2CpOUp/s6bz3+cpCUBSnfK4?= =?iso-8859-1?Q?eJnk9jYpI5bu4Pi3NuvUNga4+ByYrK0mQ794Ri6jdGSXI7E4kqwSL4E3Df?= =?iso-8859-1?Q?nlOSDM4VK5kkhxXzWC/ZMKWiCsGaGaq1UwhSYEHil4hbLFevdyjJ+wi050?= =?iso-8859-1?Q?V1OgK4NL0Q38OFu/KV4r9Rr6ULDmOI+VyVuxZ/Qmtb58/usnCOBNBwatLB?= =?iso-8859-1?Q?5mSsowO829MnveUnDcGXb7Gw5xp9pzYpmwEWlrGPVWltRsymQjgOpkq7Bi?= =?iso-8859-1?Q?F8JVDO43Jfq3Uj+UH2HchdcErgFBEOLOM1M4elpS/e4LI/2urJPT3dYG6h?= =?iso-8859-1?Q?aNnE1C2nW/WB6wRlvc6Z/gOZOGlFHG8CGiHpfjUz58s8EzOi6CLAtEgyvo?= =?iso-8859-1?Q?iWy51tEFNC+8y7DYv/1dx8yhqjXnaBbdAL0Iz6eHnWTuCQZU0a1Fm5Db/I?= =?iso-8859-1?Q?rjYKMipKDwmObzq+AzKnVkceu6a0HnFZz2ypozvuDpPNM1tbkcY9/smjsb?= =?iso-8859-1?Q?5rkey8IIdTquc4Opqsh4p3aeerGFLK6YzGxYpwHgmW/JMOht+XBvsdT8U4?= =?iso-8859-1?Q?3GnxXTwmHI/gtrrGlSAqeZt0aGs2WjLDrC7Tnjb/JOHHFE2xvoxuI3Fwdl?= =?iso-8859-1?Q?BguB1vbuqTvKt9T4IZxdnAoCiHU6GIz7w6yhOoDh91e02AU09ljbqDFTCh?= =?iso-8859-1?Q?vf545jzRLVzyOrUZDj/+XjRmfvoxkd2UOgQs0cGVveraVTmqCT/dhZCf45?= =?iso-8859-1?Q?ddgcgXGVtdkstcUSeiLyVSKV7RTx06ONqHXFgYVjPkaJPQwVR3LtbW8xG4?= =?iso-8859-1?Q?m4oA04n9hQnyWkYgGIruL+KB/vxZYWPMLp3HnnDU+H8XZ3lp2dHEwaQON2?= =?iso-8859-1?Q?1hzDNUh7ICctIt4t7Q+eFH3ADtL+lqHGmiYUn6rDrQnVHOV3FMK/viNi4x?= =?iso-8859-1?Q?q56B/c9LF13vEKfK146EsmAGxNRJsfh3INTpYnal0rcn/keRs1UO25i/qQ?= =?iso-8859-1?Q?Ok2WSTbJ9zSIvd7q3x/wPR2tiM+O7MuizulC/9s/7ZOeC3yr1JeWsQgDE0?= =?iso-8859-1?Q?nw4pVawnvtfjsKCB+QYg4v9AXUQq1ksmqEnc6U500fPCVJq8CgO3D4DGJp?= =?iso-8859-1?Q?Kdy5okRGHQ=3D=3D?= MIME-Version: 1.0 X-OriginatorOrg: neverhack.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MR1PPF2CB85BE05.FRAP264.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 81e9800e-95a3-4aa0-6ac5-08deff5e57f2 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Aug 2026 08:29:40.0357 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b83e978f-c31e-42ee-9b78-c60e657e1792 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: qKAlVFW15j84dacK636E8fB26s2ZUwDUsC+XQJJh8SfXrq9h2WsN6hrMxA4SNiYGav7gpIZwIw4vmbTyMp+0OOOuTr+Idc1GF6qejJCKJVE= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MRYP264MB6382 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.125 Adjusted score from AWL reputation of From: address DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy HTML_MESSAGE 0.001 HTML included in message RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: VXCB3BX6FOFYZDJTZ6R5UW44SZSCBDF3 X-Message-ID-Hash: VXCB3BX6FOFYZDJTZ6R5UW44SZSCBDF3 X-MailFrom: jlcusinato@neverhack.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1" X-Content-Filtered-By: Mailman/MimeDel 3.3.10 CC: Olivier GESNY , =?iso-8859-1?Q?Lo=EFc_SCOTTO_DI_PERROTOLO?= X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Hi, I would like to raise some attention on bug #7864, which looks ready to be applied but seems to have stalled: https://bugzilla.proxmox.com/show_bug.cgi?id=3D7864 Since 9.2, a user or API token whose privileges come only from /pool/ gets a 403 as soon as --tags is passed to VM create. The reporter attached three patches on 2026-07-30 and Fabian confirmed the next day that the analysis and fix look correct, pointing at the Developer Documentation for submission. Nothing seems to have reached this list since, and pve-guest-common master don't have the patch applied, so I suspect the CLA step is where it stopped. I am a user rather than a Perl developer, so I am not really in a position to produce a good series myself. Would one of you be willing to pick this up? The change looks small and the review appears to already be done. I am glad to test any patch against a pool-scoped token and report back. If nobody has the time for it, tell me and I will make an attempt, but I would rather not be the one writing Perl for a permission check. Respectfully, Jean-L=E9on CUSINATO