From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 048726E5C4 for ; Tue, 24 Aug 2021 08:12:53 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id E226D2A250 for ; Tue, 24 Aug 2021 08:12:22 +0200 (CEST) Received: from mail-ej1-x62d.google.com (mail-ej1-x62d.google.com [IPv6:2a00:1450:4864:20::62d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id 3000A2A239 for ; Tue, 24 Aug 2021 08:12:20 +0200 (CEST) Received: by mail-ej1-x62d.google.com with SMTP id a25so15255357ejv.6 for ; Mon, 23 Aug 2021 23:12:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=odiso-com.20150623.gappssmtp.com; s=20150623; h=message-id:subject:from:to:date:in-reply-to:references:user-agent :mime-version; bh=LLtTuzz/4lNg41OQWfh5uZaMcHepP47NAydpR04IiR8=; b=YshN4D9qV7vxY5jxRl+mdlMYB4Vr+TkT5XSO5Twc0lSu9rpOLpvFQza5MnecIeCt3G bzRw+xTZn/ikDMl9gQKJ10jZzJdijCsh3FqD8/yhHTp34y956t/xNqRx6HEdG1d4VTqX bHFIz6E7DToOuV/k9L1vp1nL0enWbhkzRKleydAF99b2fmU0RrAgjmVOd3bFSFAlGIv4 xE7yPw8NLB22NkRQWCWYcr1LdQg9YQWm1w+km3Aeniyl0wVHPdRGXE7AIlKaOW7rObi+ I2vs7vKw746w6HHD3OfTlS4AHasrMIfjzI2noTQS5MLjQtuJW2IuB9isvNxFpuVs4JXc e/7A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:subject:from:to:date:in-reply-to :references:user-agent:mime-version; bh=LLtTuzz/4lNg41OQWfh5uZaMcHepP47NAydpR04IiR8=; b=bTF3lmGF+n7q4x2qHBzDik8wFl/c3J/1VmTozlDk2d5/yXoo0ymRow2DLQZ/iJ5Cm1 YxTl4D4tA6gjWwz9eqUtb+/Kzk5xHHAYQaFfIMYIhuvUsq2YAYYa52aTsxURvtEHkJ3h qdSrs1aYkjfqQ5PhlWiW6uyZbASmyEqoiBwmNdS99+JMo5E2sCRofZ5P9fID55KklMxU oaRkB8C2D8RU93ahAru7BCcj4C+N+/lpOIteON+S/TcXXOtdBnqwVY+4VkGLkR4IO0SP 0P7PVmPdVEKdlqiQ9ZsPGHdUa1rlz8xUx3ngfnDhoty6MGjU/FTbo3tfkVJJ//eDkGIK 9L7g== X-Gm-Message-State: AOAM530+Rm5rYmFH4E9h10FF2q+uktMg3Fe1M+CX5uI4HrAwHZui50w2 9Wh8VlsPOySHB1QDkXJkT9DpgA== X-Google-Smtp-Source: ABdhPJx8QInhWrJ/qkMWFP7eMLbJqTXcjY+Mc5HPZQ+wg3Q2JNMgpxmz4ZJqNJrbEbuBWBNr1DRTXg== X-Received: by 2002:a17:906:d183:: with SMTP id c3mr39394110ejz.283.1629785533859; Mon, 23 Aug 2021 23:12:13 -0700 (PDT) Received: from [192.168.178.50] ([79.132.253.106]) by smtp.gmail.com with ESMTPSA id m5sm8557536ejg.53.2021.08.23.23.12.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 23 Aug 2021 23:12:13 -0700 (PDT) Message-ID: <715f0884db3d83b29a71c90bb34609d8b14b9b71.camel@odiso.com> From: alexandre derumier To: Thomas Lamprecht , Proxmox VE development discussion Date: Tue, 24 Aug 2021 08:12:12 +0200 In-Reply-To: References: <20210805145900.3265228-1-aderumier@odiso.com> <20210805145900.3265228-4-aderumier@odiso.com> <144f9c657d3786883f5ed178362323a6e018f6f0.camel@odiso.com> User-Agent: Evolution 3.40.4 MIME-Version: 1.0 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.739 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature HTML_MESSAGE 0.001 HTML included in message RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: Re: [pve-devel] [PATCH pve-manager 2/2] api2 : network: anybridge: don't display bridges if user have access to vnets. X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Aug 2021 06:12:53 -0000 Le lundi 23 août 2021 à 18:39 +0200, Thomas Lamprecht a écrit : > I mean, we could also just see bridges as a vnet and handle them with > the > `/sdn/vnets/` path? Checking for every bridge/vnet if some priv. > is > available, we probably would need two privileges, one for "allowed to > use" > and a "allowed to modify" priv. yes, I was thinking about this way too. I'll rework this patch, thanks for the review.