[PATCH proxmox-backup v2 15/43] server: allow iterating contents for Datastore.Append permissions

[Christian Ebner <c.ebner@proxmox.com>]

Appending backups to groups in namespaces must be aware of
pre-existing contents, so it must be allowed to iterate those.

Further, sort the privs list alphabetically to improve readability.

Signed-off-by: Christian Ebner <c.ebner@proxmox.com>
---
 src/backup/hierarchy.rs | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/src/backup/hierarchy.rs b/src/backup/hierarchy.rs
index ef8efd323..d81dc3565 100644
--- a/src/backup/hierarchy.rs
+++ b/src/backup/hierarchy.rs
@@ -3,8 +3,8 @@ use std::sync::Arc;
 use anyhow::{Error, bail};
 
 use pbs_api_types::{
-    Authid, BackupNamespace, PRIV_DATASTORE_AUDIT, PRIV_DATASTORE_BACKUP, PRIV_DATASTORE_MODIFY,
-    PRIV_DATASTORE_READ, privs_to_priv_names,
+    Authid, BackupNamespace, PRIV_DATASTORE_APPEND, PRIV_DATASTORE_AUDIT, PRIV_DATASTORE_BACKUP,
+    PRIV_DATASTORE_MODIFY, PRIV_DATASTORE_READ, privs_to_priv_names,
 };
 use pbs_config::CachedUserInfo;
 use pbs_datastore::{DataStore, ListGroups, ListNamespacesRecursive, backup_info::BackupGroup};
@@ -151,8 +151,11 @@ impl<'a> ListAccessibleBackupGroups<'a> {
     }
 }
 
-pub static NS_PRIVS_OK: u64 =
-    PRIV_DATASTORE_MODIFY | PRIV_DATASTORE_READ | PRIV_DATASTORE_BACKUP | PRIV_DATASTORE_AUDIT;
+pub static NS_PRIVS_OK: u64 = PRIV_DATASTORE_APPEND
+    | PRIV_DATASTORE_AUDIT
+    | PRIV_DATASTORE_BACKUP
+    | PRIV_DATASTORE_READ
+    | PRIV_DATASTORE_MODIFY;
 
 impl Iterator for ListAccessibleBackupGroups<'_> {
     type Item = Result<BackupGroup, Error>;
-- 
2.47.3