[PATCH proxmox-backup 11/28] api: backup: allow backup for user/token with append permission

[Christian Ebner <c.ebner@proxmox.com>]

In addition to these with PRIV_DATASTORE_BACKUP, also users/tokens
with PRIV_DATASTORE_APPEND should be able to create new backup groups
and snapshots.

Since only one of them is required to be set, change the priv check to
be partial only.

Signed-off-by: Christian Ebner <c.ebner@proxmox.com>
---
 src/api2/backup/mod.rs | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/api2/backup/mod.rs b/src/api2/backup/mod.rs
index fe01636d6..cb54d397c 100644
--- a/src/api2/backup/mod.rs
+++ b/src/api2/backup/mod.rs
@@ -23,7 +23,8 @@ use proxmox_sortable_macro::sortable;
 use pbs_api_types::{
     ArchiveType, Authid, BACKUP_ARCHIVE_NAME_SCHEMA, BACKUP_ID_SCHEMA, BACKUP_NAMESPACE_SCHEMA,
     BACKUP_TIME_SCHEMA, BACKUP_TYPE_SCHEMA, BackupArchiveName, BackupNamespace, BackupType,
-    CHUNK_DIGEST_SCHEMA, DATASTORE_SCHEMA, Operation, PRIV_DATASTORE_BACKUP, VerifyState,
+    CHUNK_DIGEST_SCHEMA, DATASTORE_SCHEMA, Operation, PRIV_DATASTORE_APPEND, PRIV_DATASTORE_BACKUP,
+    VerifyState,
 };
 use pbs_config::CachedUserInfo;
 use pbs_datastore::index::IndexFile;
@@ -94,8 +95,8 @@ fn upgrade_to_backup_protocol(
             .check_privs(
                 &auth_id,
                 &backup_ns.acl_path(&store),
-                PRIV_DATASTORE_BACKUP,
-                false,
+                PRIV_DATASTORE_APPEND | PRIV_DATASTORE_BACKUP,
+                true,
             )
             .map_err(|err| http_err!(FORBIDDEN, "{err}"))?;
 
-- 
2.47.3