tyler
/
proxmox-backup
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

api: config: access: openid: use better Privilige Realm.Allocate 

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
This commit is contained in:
Dominik Csapak 2021-07-12 09:48:06 +02:00 committed by Thomas Lamprecht
parent 9779ad0b00
commit bbd34d70d5
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/api2/config/access/openid.rs
View File

@ -7,7 +7,7 @@ use ::serde::{Deserialize, Serialize};
use proxmox::api::{api, Permission, Router, RpcEnvironment}; use proxmox::api::{api, Permission, Router, RpcEnvironment};
use crate::config::domains::{self, OpenIdRealmConfig}; use crate::config::domains::{self, OpenIdRealmConfig};
use crate::config::acl::{PRIV_SYS_AUDIT, PRIV_PERMISSIONS_MODIFY}; use crate::config::acl::{PRIV_SYS_AUDIT, PRIV_REALM_ALLOCATE};
use crate::api2::types::*; use crate::api2::types::*;
#[api( #[api(
@ -20,7 +20,7 @@ use crate::api2::types::*;
items: { type: OpenIdRealmConfig }, items: { type: OpenIdRealmConfig },
}, },
access: { access: {
permission: &Permission::Privilege(&["access", "domains"], PRIV_SYS_AUDIT, false), permission: &Permission::Privilege(&["access", "domains"], PRIV_REALM_ALLOCATE, false),
}, },
)] )]
/// List configured OpenId realms /// List configured OpenId realms
@ -49,7 +49,7 @@ pub fn list_openid_realms(
}, },
}, },
access: { access: {
permission: &Permission::Privilege(&["access", "domains"], PRIV_PERMISSIONS_MODIFY, false), permission: &Permission::Privilege(&["access", "domains"], PRIV_REALM_ALLOCATE, false),
}, },
)] )]
/// Create a new OpenId realm /// Create a new OpenId realm
@ -87,7 +87,7 @@ pub fn create_openid_realm(config: OpenIdRealmConfig) -> Result<(), Error> {
}, },
}, },
access: { access: {
permission: &Permission::Privilege(&["access", "domains"], PRIV_PERMISSIONS_MODIFY, false), permission: &Permission::Privilege(&["access", "domains"], PRIV_REALM_ALLOCATE, false),
}, },
)] )]
/// Remove a OpenID realm configuration /// Remove a OpenID realm configuration
@ -204,7 +204,7 @@ pub enum DeletableProperty {
}, },
returns: { type: OpenIdRealmConfig }, returns: { type: OpenIdRealmConfig },
access: { access: {
permission: &Permission::Privilege(&["access", "domains"], PRIV_PERMISSIONS_MODIFY, false), permission: &Permission::Privilege(&["access", "domains"], PRIV_REALM_ALLOCATE, false),
}, },
)] )]
/// Update an OpenID realm configuration /// Update an OpenID realm configuration