From: Dietmar Maurer <dietmar@proxmox.com>
To: "Proxmox Backup Server development discussion"
<pbs-devel@lists.proxmox.com>,
"Fabian Grünbichler" <f.gruenbichler@proxmox.com>
Subject: [pbs-devel] applied: [PATCH proxmox-backup 0/3] job privileges
Date: Fri, 6 Nov 2020 12:56:18 +0100 (CET) [thread overview]
Message-ID: <69603351.861.1604663778819@webmail.proxmox.com> (raw)
In-Reply-To: <20201106102309.1458959-1-f.gruenbichler@proxmox.com>
applied
> On 11/06/2020 11:23 AM Fabian Grünbichler <f.gruenbichler@proxmox.com> wrote:
>
>
> this series reworks some more job privileges:
>
> the first is a follow-up fix for verification job config privileges,
> the second extends it to the corresponding 'admin/' API endpoints,
> and the third is a usability improvement to allow semi-privileged users
> to view/access job tasks which don't belong to them
>
> some commit messages might need to be adapted if this gets applied after
> backup@pam was replaced with root@pam in the scheduler
>
> Fabian Grünbichler (3):
> verify: fix unprivileged verification jobs
> verify: allow unprivileged access to admin API
> tasks: allow access to job tasks
>
> src/api2/admin/verify.rs | 33 ++++++++++++--
> src/api2/config/verify.rs | 92 +++++++++++++++++++++++++++------------
> src/api2/node/tasks.rs | 74 +++++++++++++++++++++++++++++--
> src/api2/pull.rs | 8 +++-
> src/api2/types/mod.rs | 5 +++
> src/server/verify_job.rs | 6 ++-
> 6 files changed, 179 insertions(+), 39 deletions(-)
>
> --
> 2.20.1
>
>
>
> _______________________________________________
> pbs-devel mailing list
> pbs-devel@lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel
next prev parent reply other threads:[~2020-11-06 11:57 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-11-06 10:23 [pbs-devel] " Fabian Grünbichler
2020-11-06 10:23 ` [pbs-devel] [PATCH proxmox-backup 1/3] verify: fix unprivileged verification jobs Fabian Grünbichler
2020-11-06 10:23 ` [pbs-devel] [PATCH proxmox-backup 2/3] verify: allow unprivileged access to admin API Fabian Grünbichler
2020-11-06 10:23 ` [pbs-devel] [PATCH proxmox-backup 3/3] tasks: allow access to job tasks Fabian Grünbichler
2020-11-06 11:56 ` Dietmar Maurer [this message]
2020-11-06 12:06 ` [pbs-devel] applied: applied: [PATCH proxmox-backup 0/3] job privileges Dietmar Maurer
2020-11-06 12:11 ` Dietmar Maurer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=69603351.861.1604663778819@webmail.proxmox.com \
--to=dietmar@proxmox.com \
--cc=f.gruenbichler@proxmox.com \
--cc=pbs-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox