Proxmox/pve-access-control
5
0
Fork 0
mirror of git://git.proxmox.com/git/pve-access-control.git synced 2025-01-03 01:17:55 +03:00
Code Releases Activity

api: permissions: allow users to view their own permissions

Browse Source 
even when specifying an explicit userid matching their own.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Tested-by: Daniel Kral <d.kral@proxmox.com>
This commit is contained in:
Fabian Grünbichler 2024-11-05 09:30:38 +01:00 committed by Thomas Lamprecht
parent 37a813d721
commit 6287395114
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/PVE/API2/AccessControl.pm
View File

@ -486,14 +486,14 @@ __PACKAGE__->register_method({
my ($param) = @_;
my $rpcenv = PVE::RPCEnvironment::get();
my $authid = $rpcenv->get_user();
my $userid = $param->{userid};
if (defined($userid)) {
$rpcenv->check($rpcenv->get_user(), '/access', ['Sys.Audit']);
} else {
$userid = $rpcenv->get_user();
}
$userid = $authid if !defined($userid);
if ($userid ne $authid) {
$rpcenv->check($rpcenv->get_user(), '/access', ['Sys.Audit']);
}
my $res;
if (my $path = $param->{path}) {