* bug #7864: pool-scoped VM create with tags still broken. Could someone pick up the patch?
@ 2026-08-21 8:29 Jean-Léon CUSINATO
0 siblings, 0 replies; only message in thread
From: Jean-Léon CUSINATO @ 2026-08-21 8:29 UTC (permalink / raw)
To: pve-devel@lists.proxmox.com; +Cc: Olivier GESNY, Loïc SCOTTO DI PERROTOLO
Hi,
I would like to raise some attention on bug #7864, which looks ready to be
applied but seems to have stalled:
https://bugzilla.proxmox.com/show_bug.cgi?id=7864
Since 9.2, a user or API token whose privileges come only from
/pool/<pool> gets a 403 as soon as --tags is passed to VM create.
The reporter attached three patches on 2026-07-30 and Fabian confirmed the
next day that the analysis and fix look correct, pointing at the Developer
Documentation for submission. Nothing seems to have reached this list
since, and pve-guest-common master don't have the patch applied,
so I suspect the CLA step is where it stopped.
I am a user rather than a Perl developer, so I am not really in a position
to produce a good series myself. Would one of you be willing to pick this
up? The change looks small and the review appears to already be done. I am
glad to test any patch against a pool-scoped token and report back.
If nobody has the time for it, tell me and I will make an attempt, but I
would rather not be the one writing Perl for a permission check.
Respectfully,
Jean-Léon CUSINATO
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-08-21 8:44 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-21 8:29 bug #7864: pool-scoped VM create with tags still broken. Could someone pick up the patch? Jean-Léon CUSINATO
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox