From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 682FE955E1 for ; Wed, 1 Mar 2023 15:22:57 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id DFB661AEDE for ; Wed, 1 Mar 2023 15:22:26 +0100 (CET) Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com [94.136.29.106]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS for ; Wed, 1 Mar 2023 15:22:25 +0100 (CET) Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1]) by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 243BE48D70 for ; Wed, 1 Mar 2023 15:22:24 +0100 (CET) From: Fiona Ebner To: pve-devel@lists.proxmox.com Date: Wed, 1 Mar 2023 15:22:18 +0100 Message-Id: <20230301142220.130986-1-f.ebner@proxmox.com> X-Mailer: git-send-email 2.30.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 AWL -0.003 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [nodes.pm] Subject: [pve-devel] [PATCH-SERIES manager] improve bulk action permissions X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Mar 2023 14:22:57 -0000 In the UI, fix the checks to use the same permission as the backend, i.e. VM.PowerMgmt rather than Sys.PowerMgmt. In the backend, also allow the bulk action when the user has the appropriate permission for each guest in the passed-in list. Fiona Ebner (2): ui: bulk start/stop: align capability checks with backend api: node: bulk actions: allow when user has permission for each guest PVE/API2/Nodes.pm | 39 +++++++++++++++++++++++++++++++++--- www/manager6/node/CmdMenu.js | 4 +++- www/manager6/node/Config.js | 6 +++--- 3 files changed, 42 insertions(+), 7 deletions(-) -- 2.30.2