From: Alexandre Derumier <aderumier@odiso.com>
To: pve-devel@lists.proxmox.com
Subject: [pve-devel] [PATCH pve-manager 0/4] add vnet/localbridge permissions management
Date: Fri, 26 May 2023 09:27:20 +0200 [thread overview]
Message-ID: <20230526072724.1605613-1-aderumier@odiso.com> (raw)
Hi,
as we has discuted some weeks ago,
this patche serie introduce management of acl for vnets && local bridges
I have reuse current sdn permissions path, to have common paths
/sdn/vnets/<zone>/<vnet>
where the local vmbr are in a virtual "local" zone
/sdn/vnets/local/<vnet>
Vlans permissions are also handled with
/sdn/vnets/<zone>/<vnet>.<tag>
if user have permissions on the zone, he have access to all vnets/vlan
if user have permissions on the vnet, he have access to all vlans of the vnet
if user have permissions on the vnet.tag, he have access to only the specific vlan.
I have reworked the sdn zone panel from the tree, to manage permissions
on displayed vnets.
some screenshots:
https://mutulin1.odiso.net/sdnzone-perm.png
https://mutulin1.odiso.net/localzone-perm.png
patch1-2: can be applied on proxmox7, so users can already add permissions
before upgrade to proxmox8
patch3-4: add filtering the displayed local bridges (for proxmox8)
Alexandre Derumier (4):
add vnet permissions panel
add permissions management for "local" network zone
api2: network: check permissions for local bridges
api2: network: check vlan permissions for local bridges
PVE/API2/Cluster.pm | 12 ++
PVE/API2/Network.pm | 33 ++-
www/manager6/Makefile | 2 +
www/manager6/sdn/Browser.js | 17 +-
www/manager6/sdn/VnetACLView.js | 299 +++++++++++++++++++++++++++
www/manager6/sdn/ZoneContentPanel.js | 41 ++++
www/manager6/sdn/ZoneContentView.js | 52 ++++-
7 files changed, 429 insertions(+), 27 deletions(-)
create mode 100644 www/manager6/sdn/VnetACLView.js
create mode 100644 www/manager6/sdn/ZoneContentPanel.js
--
2.30.2
next reply other threads:[~2023-05-26 7:27 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-05-26 7:27 Alexandre Derumier [this message]
2023-05-26 7:27 ` [pve-devel] [PATCH pve-manager 1/4] add vnet permissions panel Alexandre Derumier
2023-05-26 7:27 ` [pve-devel] [PATCH pve-manager 2/4] add permissions management for "local" network zone Alexandre Derumier
2023-06-02 11:39 ` Fabian Grünbichler
2023-06-02 12:21 ` DERUMIER, Alexandre
2023-06-02 14:18 ` DERUMIER, Alexandre
2023-05-26 7:27 ` [pve-devel] [PATCH pve-manager 3/4] api2: network: check permissions for local bridges Alexandre Derumier
2023-06-02 11:39 ` Fabian Grünbichler
2023-05-26 7:27 ` [pve-devel] [PATCH pve-manager 4/4] api2: network: check vlan " Alexandre Derumier
2023-06-02 11:39 ` Fabian Grünbichler
2023-06-02 12:32 ` DERUMIER, Alexandre
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20230526072724.1605613-1-aderumier@odiso.com \
--to=aderumier@odiso.com \
--cc=pve-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox