From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 3E1B291737 for ; Mon, 27 Mar 2023 12:18:36 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 1986E86A2 for ; Mon, 27 Mar 2023 12:18:36 +0200 (CEST) Received: from bastionodiso.odiso.net (bastionodiso.odiso.net [185.151.191.93]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS for ; Mon, 27 Mar 2023 12:18:35 +0200 (CEST) Received: from kvmformation3.odiso.net (formationkvm3.odiso.net [10.3.94.12]) by bastionodiso.odiso.net (Postfix) with ESMTP id BD9828105; Mon, 27 Mar 2023 12:18:28 +0200 (CEST) Received: by kvmformation3.odiso.net (Postfix, from userid 0) id B0DCC263878; Mon, 27 Mar 2023 12:18:28 +0200 (CEST) From: Alexandre Derumier To: pve-devel@lists.proxmox.com Date: Mon, 27 Mar 2023 12:18:19 +0200 Message-Id: <20230327101822.3082769-1-aderumier@odiso.com> X-Mailer: git-send-email 2.30.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 AWL 0.010 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy HEADER_FROM_DIFFERENT_DOMAINS 0.25 From and EnvelopeFrom 2nd level mail domains are different KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment KAM_LAZY_DOMAIN_SECURITY 1 Sending domain does not have any anti-forgery methods SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_NONE 0.001 SPF: sender does not publish an SPF Record Subject: [pve-devel] [PATCH-SERIES pve-access-control/pve-manager] Add firewall caps X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Mar 2023 10:18:36 -0000 This patch series add missing caps on firewall buttons in differents firewall grid and panels, and also add correct audit permissions on vm|ct firewall menus. For datacenter, it's using Sys.Modify, but currently the root user don't have this guicap by default on datacenter. The pve-access-control patch add this permission. (Please double check this patch, I'm not sure to understand this code correctly, but my tests don't seem to change default perm of other user than root) pve-access-control: Alexandre Derumier (1): rpcenv: compute_api_permission : add default root dc.Sys.Modify src/PVE/RPCEnvironment.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) pve-manager: Alexandre Derumier (2): ui: qemu|lxc : fix firewall menu caps ui: firewall panel/grids : add caps on buttons www/manager6/dc/SecurityGroups.js | 7 +++++++ www/manager6/grid/FirewallAliases.js | 6 ++++++ www/manager6/grid/FirewallOptions.js | 6 +++++- www/manager6/grid/FirewallRules.js | 17 ++++++++++++----- www/manager6/lxc/Config.js | 7 ++++++- www/manager6/panel/IPSet.js | 18 +++++++++++++++++- www/manager6/qemu/Config.js | 9 +++++++-- 7 files changed, 60 insertions(+), 10 deletions(-) -- 2.30.2