From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id EF72FDDED for ; Tue, 6 Dec 2022 12:06:37 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id D94082E13C for ; Tue, 6 Dec 2022 12:06:37 +0100 (CET) Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com [94.136.29.106]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS for ; Tue, 6 Dec 2022 12:06:36 +0100 (CET) Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1]) by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 6035144DBE for ; Tue, 6 Dec 2022 12:06:36 +0100 (CET) From: Dominik Csapak To: pve-devel@lists.proxmox.com Date: Tue, 6 Dec 2022 12:06:30 +0100 Message-Id: <20221206110635.1885744-2-d.csapak@proxmox.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20221206110635.1885744-1-d.csapak@proxmox.com> References: <20221206110635.1885744-1-d.csapak@proxmox.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 AWL 0.064 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [plugin.pm] Subject: [pve-devel] [PATCH access-control v2 1/2] realm: sync: allow 'none' for 'remove-vanished' option X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Dec 2022 11:06:38 -0000 with that, the api call can now override the default option that is set on the realm (if any) by providing 'none' it was not possible previously to override the realm default when one wanted no properties to delete no other code changes are necessary since we only extract the known values 'acl' etc. and 'none' has no meaning there Signed-off-by: Dominik Csapak --- src/PVE/Auth/Plugin.pm | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/src/PVE/Auth/Plugin.pm b/src/PVE/Auth/Plugin.pm index 03d3342..bae9fb9 100755 --- a/src/PVE/Auth/Plugin.pm +++ b/src/PVE/Auth/Plugin.pm @@ -63,10 +63,12 @@ my $realm_sync_options_desc = { ." vanishes during a sync. The following values are possible: 'entry' removes the" ." user/group when not returned from the sync. 'properties' removes the set" ." properties on existing user/group that do not appear in the source (even custom ones)." - ." 'acl' removes acls when the user/group is not returned from the sync.", + ." 'acl' removes acls when the user/group is not returned from the sync." + ." Instead of a list it also can be 'none' (the default).", type => 'string', - typetext => "[acl];[properties];[entry]", - pattern => "(?:$remove_options\;)*$remove_options", + default => 'none', + typetext => "([acl];[properties];[entry])|none", + pattern => "(?:(?:$remove_options\;)*$remove_options)|none", optional => '1', }, # TODO check/rewrite in pve7to8, and remove with 8.0 -- 2.30.2