From f1490da82a68a40def04b64ed54dede546d113e7 Mon Sep 17 00:00:00 2001
From: Dietmar Maurer <dietmar@proxmox.com>
Date: Thu, 30 Apr 2020 09:32:13 +0200
Subject: [PATCH] use resonable acl paths (fixup)

---
 src/api2/node/status.rs | 2 +-
 src/api2/node/tasks.rs  | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/api2/node/status.rs b/src/api2/node/status.rs
index 0daba1e6..3b966d63 100644
--- a/src/api2/node/status.rs
+++ b/src/api2/node/status.rs
@@ -47,7 +47,7 @@ use crate::config::acl::PRIV_SYS_AUDIT;
         }
     },
     access: {
-        permission: &Permission::Privilege(&[], PRIV_SYS_AUDIT, false),
+        permission: &Permission::Privilege(&["system", "status"], PRIV_SYS_AUDIT, false),
     },
 )]
 /// Read node memory, CPU and (root) disk usage
diff --git a/src/api2/node/tasks.rs b/src/api2/node/tasks.rs
index 79811e20..e8de42fd 100644
--- a/src/api2/node/tasks.rs
+++ b/src/api2/node/tasks.rs
@@ -70,7 +70,7 @@ use crate::config::acl::{PRIV_SYS_AUDIT, PRIV_SYS_MODIFY};
         },
     },
     access: {
-        permission: &Permission::Privilege(&[], PRIV_SYS_AUDIT, false),
+        permission: &Permission::Privilege(&["system", "tasks"], PRIV_SYS_AUDIT, false),
     },
 )]
 /// Get task status.
@@ -138,7 +138,7 @@ fn extract_upid(param: &Value) -> Result<UPID, Error> {
         },
     },
     access: {
-        permission: &Permission::Privilege(&[], PRIV_SYS_AUDIT, false),
+        permission: &Permission::Privilege(&["system", "tasks"], PRIV_SYS_AUDIT, false),
     },
 )]
 /// Read task log.
@@ -203,7 +203,7 @@ fn read_task_log(
         },
     },
     access: {
-        permission: &Permission::Privilege(&[], PRIV_SYS_MODIFY, false),
+        permission: &Permission::Privilege(&["system", "tasks"], PRIV_SYS_MODIFY, false),
     },
 )]
 /// Try to stop a task.