From: Thomas Lamprecht <t.lamprecht@proxmox.com>
To: pve-devel@lists.proxmox.com, Jakob Klocker <j.klocker@proxmox.com>
Subject: applied: [PATCH manager/access-control 0/3] fix #7513: fine-grained ACL for node certificates
Date: Tue, 3 Nov 2026 00:26:59 +0100 [thread overview]
Message-ID: <179366201699.2161553.14542111857749640370.b4-ty@b4> (raw)
In-Reply-To: <20260528113505.12961-1-j.klocker@proxmox.com>
On Thu, 28 May 2026 13:35:01 +0200, Jakob Klocker wrote:
> Managing node certificates currently requires broad /nodes/{node}
> permissions, which violates the least-privilege principle. This
> series adds /nodes/{node}/certificates as a dedicated ACL path and
> moves the relevant permission checks onto it, so certificate
> management can be done without granting node-wide rights.
>
> The pve-access-control patch registers the new ACL path and must be
> applied first. The pve-manager patches depend on it for the API
> permission checks and the GUI path selector.
>
> [...]
Applied, thanks!
[manager] applied to pve-manager.git (master)
[1/2] fix #7513: api: certs: change ACL on certificates path
https://git.proxmox.com/?p=pve-manager.git;a=commitdiff;h=b137da6b88a55ec93538f2304139c93ab77ec54c
[2/2] fix #7513: ui: perm path store: add per-node certificates ACL path
https://git.proxmox.com/?p=pve-manager.git;a=commitdiff;h=509a1d5612ece3d99165ce718d6487ff787b3948
[access-control] applied to git/pve-access-control.git (master)
[1/1] fix #7513: acl: allow ACL access to /nodes/{node}/certificates path
https://git.proxmox.com/?p=pve-manager.git;a=commitdiff;h=a4054cd7ee099a9b7d4ded8ad8208d0468b130f3
prev parent reply other threads:[~2026-11-02 23:27 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-05-28 11:35 [PATCH manager/access-control 0/3] fix #7513: fine-grained ACL for node certificates Jakob Klocker
2026-05-28 11:35 ` [PATCH access-control 1/3] fix #7513: acl: allow ACL access to /nodes/{node}/certificates path Jakob Klocker
2026-05-28 11:35 ` [PATCH manager 2/3] fix #7513: api: certs: change ACL on certificates path Jakob Klocker
2026-05-28 11:35 ` [PATCH manager 3/3] fix #7513: ui: perm path store: add per-node certificates ACL path Jakob Klocker
2026-07-09 12:48 ` [PATCH manager/access-control 0/3] fix #7513: fine-grained ACL for node certificates Michael Köppl
2026-10-21 6:57 ` Jakob Klocker
2026-11-02 23:26 ` Thomas Lamprecht [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=179366201699.2161553.14542111857749640370.b4-ty@b4 \
--to=t.lamprecht@proxmox.com \
--cc=j.klocker@proxmox.com \
--cc=pve-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox