tyler
/
proxmox-backup
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

add Datastore.Backup, Datastore.PowerUser and Datastore.Reader role

This commit is contained in:
Dietmar Maurer 2020-04-28 10:48:21 +02:00
parent 54552dda59
commit 6f6aa95abb
1 changed files with 25 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
src/config/acl.rs
View File

@ -33,6 +33,7 @@ pub const ROLE_AUDIT: u64 =
PRIV_SYS_AUDIT | PRIV_SYS_AUDIT |
PRIV_DATASTORE_AUDIT; PRIV_DATASTORE_AUDIT;
/// Datastore.Admin can do anything on the datastore.
pub const ROLE_DATASTORE_ADMIN: u64 = pub const ROLE_DATASTORE_ADMIN: u64 =
PRIV_DATASTORE_AUDIT | PRIV_DATASTORE_AUDIT |
PRIV_DATASTORE_MODIFY | PRIV_DATASTORE_MODIFY |
@ -40,9 +41,21 @@ PRIV_DATASTORE_READ |
PRIV_DATASTORE_BACKUP | PRIV_DATASTORE_BACKUP |
PRIV_DATASTORE_PRUNE; PRIV_DATASTORE_PRUNE;
pub const ROLE_DATASTORE_USER: u64 = /// Datastore.Reader can read datastore content an do restore
pub const ROLE_DATASTORE_READER: u64 =
PRIV_DATASTORE_AUDIT |
PRIV_DATASTORE_READ;
/// Datastore.Backup can do backup and restore, but no prune.
pub const ROLE_DATASTORE_BACKUP: u64 =
PRIV_DATASTORE_BACKUP; PRIV_DATASTORE_BACKUP;
/// Datastore.PowerUser can do backup, restore, and prune.
pub const ROLE_DATASTORE_POWERUSER: u64 =
PRIV_DATASTORE_PRUNE |
PRIV_DATASTORE_BACKUP;
/// Datastore.Audit can audit the datastore.
pub const ROLE_DATASTORE_AUDIT: u64 = pub const ROLE_DATASTORE_AUDIT: u64 =
PRIV_DATASTORE_AUDIT; PRIV_DATASTORE_AUDIT;
@ -69,9 +82,17 @@ lazy_static! {
ROLE_DATASTORE_ADMIN, ROLE_DATASTORE_ADMIN,
"Datastore Administrator", "Datastore Administrator",
)); ));
map.insert("Datastore.User", ( map.insert("Datastore.Reader", (
ROLE_DATASTORE_USER, ROLE_DATASTORE_READER,
"Datastore User", "Datastore Reader (inspect datastore content and do restores)",
));
map.insert("Datastore.Backup", (
ROLE_DATASTORE_BACKUP,
"Datastore Backup (backup and restore owned backups)",
));
map.insert("Datastore.PowerUser", (
ROLE_DATASTORE_POWERUSER,
"Datastore PowerUser (backup, restore and prune owned backup)",
)); ));
map.insert("Datastore.Audit", ( map.insert("Datastore.Audit", (
ROLE_DATASTORE_AUDIT, ROLE_DATASTORE_AUDIT,