From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 289487C4F0 for ; Fri, 5 Nov 2021 09:07:19 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 1F7AC27C3C for ; Fri, 5 Nov 2021 09:06:49 +0100 (CET) Received: from bastionodiso.odiso.net (bastionodiso.odiso.net [IPv6:2a0a:1580:2000::2d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id 9D4A927C11 for ; Fri, 5 Nov 2021 09:06:43 +0100 (CET) Received: from kvmformation3.odiso.net (formationkvm3.odiso.net [10.3.94.12]) by bastionodiso.odiso.net (Postfix) with ESMTP id 16D099E6C; Fri, 5 Nov 2021 09:06:37 +0100 (CET) Received: by kvmformation3.odiso.net (Postfix, from userid 0) id 9B7F514DDF1; Fri, 5 Nov 2021 09:06:46 +0100 (CET) From: Alexandre Derumier To: pve-devel@lists.proxmox.com Date: Fri, 5 Nov 2021 09:06:42 +0100 Message-Id: <20211105080645.3145996-3-aderumier@odiso.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20211105080645.3145996-1-aderumier@odiso.com> References: <20211105080645.3145996-1-aderumier@odiso.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 AWL 0.016 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% HEADER_FROM_DIFFERENT_DOMAINS 0.249 From and EnvelopeFrom 2nd level mail domains are different KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment KAM_LAZY_DOMAIN_SECURITY 1 Sending domain does not have any anti-forgery methods NO_DNS_FOR_FROM 0.001 Envelope sender has no MX or A DNS records SPF_NONE 0.001 SPF: sender does not publish an SPF Record T_SPF_HELO_TEMPERROR 0.01 SPF: test of HELO record failed (temperror) Subject: [pve-devel] [PATCH pve-network 2/5] get_local_vnets: add permissions on /sdn/vnets/* X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Nov 2021 08:07:19 -0000 --- PVE/Network/SDN.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/PVE/Network/SDN.pm b/PVE/Network/SDN.pm index d3399ce..b95dd5b 100644 --- a/PVE/Network/SDN.pm +++ b/PVE/Network/SDN.pm @@ -193,7 +193,7 @@ sub get_local_vnets { my $privs = [ 'SDN.Audit', 'SDN.Allocate' ]; next if !$zoneid; - next if !$rpcenv->check_any($authuser, "/sdn/zones/$zoneid", $privs, 1); + next if !$rpcenv->check_any($authuser, "/sdn/zones/$zoneid", $privs, 1) && !$rpcenv->check_any($authuser, "/sdn/vnets/$vnetid", $privs, 1); my $zone_config = PVE::Network::SDN::Zones::sdn_zones_config($zones_cfg, $zoneid); -- 2.30.2