From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 4522A67AE5 for ; Tue, 10 Nov 2020 13:33:55 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 388492087B for ; Tue, 10 Nov 2020 13:33:25 +0100 (CET) Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com [212.186.127.180]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id 5399320871 for ; Tue, 10 Nov 2020 13:33:24 +0100 (CET) Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1]) by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 20D9E46063 for ; Tue, 10 Nov 2020 13:33:24 +0100 (CET) From: Fabian Ebner To: pbs-devel@lists.proxmox.com Date: Tue, 10 Nov 2020 13:33:20 +0100 Message-Id: <20201110123320.19368-1-f.ebner@proxmox.com> X-Mailer: git-send-email 2.20.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 AWL -0.026 Adjusted score from AWL reputation of From: address KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_DNSWL_MED -2.3 Sender listed at https://www.dnswl.org/, medium trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [datastore.read] Subject: [pbs-devel] [PATCH proxmox-backup] docs: user management: avoid some inconsistencies X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2020 12:33:55 -0000 The space between '--' and 'path' in two of the commands was wrong. The other changes make the names of the store and token consistent with the rest of the section and should improve readability. Also add the Datastore.Verify permission in the output of the command: proxmox-backup-manager user permissions john@pbs --path /datastore/store1 A DatastoreAdmin now has this permission and that's what john@pbs is in the example. Signed-off-by: Fabian Ebner --- docs/user-management.rst | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/docs/user-management.rst b/docs/user-management.rst index 06348917..fc849dde 100644 --- a/docs/user-management.rst +++ b/docs/user-management.rst @@ -230,11 +230,11 @@ You can list the ACLs of each user/token using the following command: .. code-block:: console # proxmox-backup-manager acl list - ┌──────────┬──────────────────┬───────────┬────────────────┐ - │ ugid │ path │ propagate │ roleid │ - ╞══════════╪══════════════════╪═══════════╪════════════════╡ - │ john@pbs │ /datastore/disk1 │ 1 │ DatastoreAdmin │ - └──────────┴──────────────────┴───────────┴────────────────┘ + ┌──────────┬───────────────────┬───────────┬────────────────┐ + │ ugid │ path │ propagate │ roleid │ + ╞══════════╪═══════════════════╪═══════════╪════════════════╡ + │ john@pbs │ /datastore/store1 │ 1 │ DatastoreAdmin │ + └──────────┴───────────────────┴───────────┴────────────────┘ A single user/token can be assigned multiple permission sets for different datastores. @@ -267,7 +267,7 @@ you can use the ``proxmox-backup-manager user permission`` command: .. code-block:: console - # proxmox-backup-manager user permissions john@pbs -- path /datastore/store1 + # proxmox-backup-manager user permissions john@pbs --path /datastore/store1 Privileges with (*) have the propagate flag set Path: /datastore/store1 @@ -276,9 +276,10 @@ you can use the ``proxmox-backup-manager user permission`` command: - Datastore.Modify (*) - Datastore.Prune (*) - Datastore.Read (*) + - Datastore.Verify (*) # proxmox-backup-manager acl update /datastore/store1 DatastoreBackup --auth-id 'john@pbs!client1' - # proxmox-backup-manager user permissions 'john@pbs!test' -- path /datastore/store1 + # proxmox-backup-manager user permissions 'john@pbs!client1' --path /datastore/store1 Privileges with (*) have the propagate flag set Path: /datastore/store1 -- 2.20.1