From 404d78c41ee1ceee9c2f66afcc0e8174e39f7ba9 Mon Sep 17 00:00:00 2001
From: Dietmar Maurer <dietmar@proxmox.com>
Date: Fri, 17 Apr 2020 15:27:04 +0200
Subject: [PATCH] src/api2/pull.rs: add access permission

---
 src/api2/pull.rs | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/api2/pull.rs b/src/api2/pull.rs
index 5cfa1f2a..e1a5a276 100644
--- a/src/api2/pull.rs
+++ b/src/api2/pull.rs
@@ -9,13 +9,14 @@ use std::io::{Seek, SeekFrom};
 use chrono::{Utc, TimeZone};
 
 use proxmox::api::api;
-use proxmox::api::{ApiMethod, Router, RpcEnvironment};
+use proxmox::api::{ApiMethod, Router, RpcEnvironment, Permission};
 
 use crate::server::{WorkerTask};
 use crate::backup::*;
 use crate::client::*;
 use crate::config::remote;
 use crate::api2::types::*;
+use crate::config::acl::PRIV_DATASTORE_ALLOCATE_SPACE;
 
 // fixme: implement filters
 // fixme: delete vanished groups
@@ -387,6 +388,12 @@ pub async fn pull_store(
             },
         },
     },
+    access: {
+        permission: &Permission::And(&[
+            &Permission::Privilege(&["datastore", "{store}"], PRIV_DATASTORE_ALLOCATE_SPACE, false),
+            &Permission::Privilege(&["remote", "{store}"], PRIV_DATASTORE_ALLOCATE_SPACE, false),
+        ]),
+    },
 )]
 /// Sync store from other repository
 async fn pull (