Wolfgang Bumiller
57098eb8fb
use rust parser for TFA config
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2021-11-10 11:13:21 +01:00
Dominik Csapak
4aa4f0b3d7
fix user deletion when realm does not enforce TFA
...
here the existance of the user is only interesting if we want to set
data, not if we delete it.
Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
2021-10-21 12:27:42 +02:00
Thomas Lamprecht
8ecf1a490d
fix #2302 : allow deletion of users when realm enforces TFA
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-09-27 15:32:05 +02:00
Alexandre Derumier
4100ba8d65
check_path: add /sdn/vnets/* path
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-23 18:19:15 +02:00
Dietmar Maurer
52d1c1b966
add OpenId configuration
2021-07-01 13:13:59 +02:00
Dietmar Maurer
8a724f7b3a
check_user_enabled: also check if user is expired
2021-07-01 13:13:59 +02:00
Thomas Lamprecht
d7e8d24ef5
access control: style: register configs in single line each
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-06-17 14:41:02 +02:00
Alexandre Derumier
0a06acb128
check_path : add sdn zone path
...
This was missing in commit20c60513b2a6b2d7c7aae0dcc0391889b9cb7ecf,
so user can't assign permisson on a zone currently
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-06-17 13:15:36 +02:00
Dominik Csapak
8737ff3718
add missing paths in check_path
...
* /access/realm/<realm>
* /access/groups/<group>
were overlooked when fixing #1500
see: https://forum.proxmox.com/threads/are-group-acls-broken-in-v6-4.91000/
Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
2021-06-16 16:19:33 +02:00
Lorenz Stechauner
6d048ad6fc
fix #3402 : add Pool.Audit permission
...
add new user "PVEPoolUser" and add Pool.Audit to "PVEAuditor".
Signed-off-by: Lorenz Stechauner <l.stechauner@proxmox.com>
2021-06-01 10:31:16 +02:00
Thomas Lamprecht
197d1016fd
buildsys: split packaging and source build-systems
...
Much nicer to handle and work with than entangling all together in a
single spaghetti pile.
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-09 19:48:50 +02:00
