[PATCH proxmox-backup v2 20/43] api: sync: allow pull to target for user/token with append permission

[Christian Ebner <c.ebner@proxmox.com>]

Allows appending new backup groups/snapshots to the target datastore
on syncs in pull direction if the user/token has append permissions
and is owner of the backups.

Signed-off-by: Christian Ebner <c.ebner@proxmox.com>
---
 src/api2/config/sync.rs | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/src/api2/config/sync.rs b/src/api2/config/sync.rs
index 980689781..a9a86abd5 100644
--- a/src/api2/config/sync.rs
+++ b/src/api2/config/sync.rs
@@ -7,10 +7,10 @@ use proxmox_router::{Permission, Router, RpcEnvironment, http_bail};
 use proxmox_schema::{api, param_bail};
 
 use pbs_api_types::{
-    Authid, JOB_ID_SCHEMA, PRIV_DATASTORE_AUDIT, PRIV_DATASTORE_BACKUP, PRIV_DATASTORE_MODIFY,
-    PRIV_DATASTORE_PRUNE, PRIV_DATASTORE_READ, PRIV_REMOTE_AUDIT, PRIV_REMOTE_DATASTORE_BACKUP,
-    PRIV_REMOTE_DATASTORE_PRUNE, PRIV_REMOTE_READ, PROXMOX_CONFIG_DIGEST_SCHEMA, SyncJobConfig,
-    SyncJobConfigUpdater,
+    Authid, JOB_ID_SCHEMA, PRIV_DATASTORE_APPEND, PRIV_DATASTORE_AUDIT, PRIV_DATASTORE_BACKUP,
+    PRIV_DATASTORE_MODIFY, PRIV_DATASTORE_PRUNE, PRIV_DATASTORE_READ, PRIV_REMOTE_AUDIT,
+    PRIV_REMOTE_DATASTORE_BACKUP, PRIV_REMOTE_DATASTORE_PRUNE, PRIV_REMOTE_READ,
+    PROXMOX_CONFIG_DIGEST_SCHEMA, SyncJobConfig, SyncJobConfigUpdater,
 };
 use pbs_config::sync;
 
@@ -130,7 +130,9 @@ pub fn check_sync_job_modify_access(
             }
 
             // creating backups on target check
-            if ns_anchor_privs & PRIV_DATASTORE_BACKUP == 0 {
+            if ns_anchor_privs & PRIV_DATASTORE_BACKUP == 0
+                && ns_anchor_privs & PRIV_DATASTORE_APPEND == 0
+            {
                 return false;
             }
 
-- 
2.47.3