Fabian Grünbichler d8ec2a25ba acl: fix any_priv_below when used with API tokens ...

The previous implementation had one issue with not handling API
tokens correctly.

In general, AclTree(Node) operates on the role level, not the priv
level - the latter is handled by cached_user_info.rs

Accordingly, the ACL tree helpers now return a list of paths where *any*
role is defined for the given AuthId, and any_priv_below then maps those
paths to privs via the regular helpers for priv lookup/checking. this
approach should also be robust if groups and group ACLs are ever
introduced.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>

2022-06-08 13:38:02 +02:00

..

src

acl: fix any_priv_below when used with API tokens

2022-06-08 13:38:02 +02:00

Cargo.toml

update to nix 0.24 / rustyline 9 / proxmox-sys 0.3

2022-06-02 14:33:33 +02:00