From e0e7fc67ae5da8b56566975bf12f00b95d2056d4 Mon Sep 17 00:00:00 2001 From: Fiona Ebner Date: Wed, 4 Dec 2024 12:37:06 +0100 Subject: [PATCH] api: clarify that password changes for PAM realm only apply to local node Reported in the community forum: https://forum.proxmox.com/threads/158518/ Signed-off-by: Fiona Ebner --- src/PVE/API2/AccessControl.pm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/PVE/API2/AccessControl.pm b/src/PVE/API2/AccessControl.pm index f23662a..bb7b78f 100644 --- a/src/PVE/API2/AccessControl.pm +++ b/src/PVE/API2/AccessControl.pm @@ -326,7 +326,8 @@ __PACKAGE__->register_method ({ description => "Each user is allowed to change his own password. A user can change the" ." password of another user if he has 'Realm.AllocateUser' (on the realm of user" ." ) and 'User.Modify' permission on /access/groups/ on a group where" - ." user is member of.", + ." user is member of. For the PAM realm, a password change does not take " + ." effect cluster-wide, but only applies to the local node.", check => [ 'or', ['userid-param', 'self'], [ 'and',