[pbs-devel] [PATCH proxmox-backup] fix #2978: allow non-root to view datastore usage

[pbs-devel] [PATCH proxmox-backup] fix #2978: allow non-root to view datastore usage

[Fabian Grünbichler]

for datastores where the requesting user has read or write permissions,
since the API method itself filters by that already. this is the same
permission setting and filtering that the datastore list API endpoint
does.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
---
 src/api2/status.rs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/api2/status.rs b/src/api2/status.rs
index c44e73f1..10ae8b3d 100644
--- a/src/api2/status.rs
+++ b/src/api2/status.rs
@@ -74,6 +74,9 @@ use crate::config::acl::{
             },
         },
     },
+    access: {
+        permission: &Permission::Anybody,
+    },
 )]
 /// List Datastore usages and estimates
 fn datastore_status(
-- 
2.20.1

[pbs-devel] applied: [PATCH proxmox-backup] fix #2978: allow non-root to view datastore usage

[Dietmar Maurer]

applied

> On 09/03/2020 2:49 PM Fabian Grünbichler <f.gruenbichler@proxmox.com> wrote:
> 
>  
> for datastores where the requesting user has read or write permissions,
> since the API method itself filters by that already. this is the same
> permission setting and filtering that the datastore list API endpoint
> does.
> 
> Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
> ---
>  src/api2/status.rs | 3 +++
>  1 file changed, 3 insertions(+)
> 
> diff --git a/src/api2/status.rs b/src/api2/status.rs
> index c44e73f1..10ae8b3d 100644
> --- a/src/api2/status.rs
> +++ b/src/api2/status.rs
> @@ -74,6 +74,9 @@ use crate::config::acl::{
>              },
>          },
>      },
> +    access: {
> +        permission: &Permission::Anybody,
> +    },
>  )]
>  /// List Datastore usages and estimates
>  fn datastore_status(
> -- 
> 2.20.1
> 
> 
> 
> _______________________________________________
> pbs-devel mailing list
> pbs-devel@lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel