public inbox for pve-devel@lists.proxmox.com
 help / color / mirror / Atom feed
* [PATCH docs] fix #7560: user management: privileges: document Sys.AccessNetwork
@ 2026-10-04 12:28 Michal Fox
  0 siblings, 0 replies; only message in thread
From: Michal Fox @ 2026-10-04 12:28 UTC (permalink / raw)
  To: pve-devel

The Sys.AccessNetwork privilege got added with pve-access-control
commit 36c1814 ("add Sys.AccessNetwork privilege") and is part of the
built-in Administrator role, but it is missing in the list of
privileges.

Document it with examples from the API calls that currently check for
it, which are downloading ISO images, templates and other images from a
URL to a storage and querying the metadata of such a URL, querying the
tags of and pulling OCI images, and creating or updating notification
targets.

Signed-off-by: Michal Fox <me@dualfroz.com>
---

Notes:
    the list of API calls is from the privilege checks in pve-manager and
    pve-storage. rendered the chapter with asciidoc, without new warnings.

 pveum.adoc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pveum.adoc b/pveum.adoc
index d089cb6..c28eae5 100644
--- a/pveum.adoc
+++ b/pveum.adoc
@@ -889,6 +889,9 @@ Node / System related privileges::
 * `Realm.Allocate`: create/modify/remove authentication realms
 * `SDN.Allocate`: manage SDN configuration
 * `SDN.Audit`: view SDN configuration
+* `Sys.AccessNetwork`: access the network from the node, for example to
+  download ISO images or templates from a URL, to pull OCI images or to set up
+  notification targets
 * `Sys.Audit`: view node status/config, Corosync cluster config, and HA config
 * `Sys.Console`: console access to node
 * `Sys.Incoming`: allow incoming data streams from other clusters (experimental)
-- 
2.43.0




^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-10-04 12:28 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-04 12:28 [PATCH docs] fix #7560: user management: privileges: document Sys.AccessNetwork Michal Fox

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Service provided by Proxmox Server Solutions GmbH | Privacy | Legal