From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <pve-devel-bounces@lists.proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9])
	by lore.proxmox.com (Postfix) with ESMTPS id 306301FF162
	for <inbox@lore.proxmox.com>; Mon,  7 Apr 2025 12:08:39 +0200 (CEST)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
	by firstgate.proxmox.com (Proxmox) with ESMTP id 0DD0F3AFB4;
	Mon,  7 Apr 2025 12:08:36 +0200 (CEST)
Message-ID: <a303e4d1-a118-4b81-a177-9c4c8b3fff3d@proxmox.com>
Date: Mon, 7 Apr 2025 12:08:31 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: Thomas Lamprecht <t.lamprecht@proxmox.com>,
 Proxmox VE development discussion <pve-devel@lists.proxmox.com>,
 =?UTF-8?Q?Fabian_Gr=C3=BCnbichler?= <f.gruenbichler@proxmox.com>,
 Gabriel Goller <g.goller@proxmox.com>
References: <20250404162908.563060-1-g.goller@proxmox.com>
 <20250404162908.563060-26-g.goller@proxmox.com>
 <9c5f591e-bf2d-4c99-ad28-02ee58bbc222@proxmox.com>
 <1744010542.6a4j1ll8ij.astroid@yuna.none>
 <ec1776b0-1a8b-45fd-bbf5-d3c96b90016b@proxmox.com>
 <50c0c55b-834c-4f73-b046-898584a075d5@proxmox.com>
 <dfbc849d-ac72-4dfb-89d5-b36a24ab71cc@proxmox.com>
Content-Language: en-US
From: Stefan Hanreich <s.hanreich@proxmox.com>
In-Reply-To: <dfbc849d-ac72-4dfb-89d5-b36a24ab71cc@proxmox.com>
X-SPAM-LEVEL: Spam detection results:  0
 AWL 0.667 Adjusted score from AWL reputation of From: address
 BAYES_00                 -1.9 Bayes spam probability is 0 to 1%
 DMARC_MISSING             0.1 Missing DMARC policy
 KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
 SPF_HELO_NONE           0.001 SPF: HELO does not publish an SPF Record
 SPF_PASS               -0.001 SPF: sender matches SPF record
Subject: Re: [pve-devel] [PATCH pve-access-control v2 1/1] permissions: add
 ACL paths for SDN fabrics
X-BeenThere: pve-devel@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/>
List-Post: <mailto:pve-devel@lists.proxmox.com>
List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe>
Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: pve-devel-bounces@lists.proxmox.com
Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com>
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