From: "Fabian Grünbichler" <f.gruenbichler@proxmox.com>
To: pbs-devel@lists.proxmox.com
Subject: [pbs-devel] [PATCH proxmox-backup 0/3] job privileges
Date: Fri, 6 Nov 2020 11:23:06 +0100 [thread overview]
Message-ID: <20201106102309.1458959-1-f.gruenbichler@proxmox.com> (raw)
this series reworks some more job privileges:
the first is a follow-up fix for verification job config privileges,
the second extends it to the corresponding 'admin/' API endpoints,
and the third is a usability improvement to allow semi-privileged users
to view/access job tasks which don't belong to them
some commit messages might need to be adapted if this gets applied after
backup@pam was replaced with root@pam in the scheduler
Fabian Grünbichler (3):
verify: fix unprivileged verification jobs
verify: allow unprivileged access to admin API
tasks: allow access to job tasks
src/api2/admin/verify.rs | 33 ++++++++++++--
src/api2/config/verify.rs | 92 +++++++++++++++++++++++++++------------
src/api2/node/tasks.rs | 74 +++++++++++++++++++++++++++++--
src/api2/pull.rs | 8 +++-
src/api2/types/mod.rs | 5 +++
src/server/verify_job.rs | 6 ++-
6 files changed, 179 insertions(+), 39 deletions(-)
--
2.20.1
next reply other threads:[~2020-11-06 10:23 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-11-06 10:23 Fabian Grünbichler [this message]
2020-11-06 10:23 ` [pbs-devel] [PATCH proxmox-backup 1/3] verify: fix unprivileged verification jobs Fabian Grünbichler
2020-11-06 10:23 ` [pbs-devel] [PATCH proxmox-backup 2/3] verify: allow unprivileged access to admin API Fabian Grünbichler
2020-11-06 10:23 ` [pbs-devel] [PATCH proxmox-backup 3/3] tasks: allow access to job tasks Fabian Grünbichler
2020-11-06 11:56 ` [pbs-devel] applied: [PATCH proxmox-backup 0/3] job privileges Dietmar Maurer
2020-11-06 12:06 ` [pbs-devel] applied: " Dietmar Maurer
2020-11-06 12:11 ` Dietmar Maurer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20201106102309.1458959-1-f.gruenbichler@proxmox.com \
--to=f.gruenbichler@proxmox.com \
--cc=pbs-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox