mirror of
https://git.proxmox.com/git/pve-access-control
synced 2025-08-06 03:33:08 +00:00
21f523a5c1
we do the same for missing users, groups and tokens, and just like groups, roles with an empty privilege set are explicitly allowed so pre-generating placeholders is possible. Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
22 lines
522 B
INI
22 lines
522 B
INI
user:User1@pve:1:
|
|
user:User2@pve:1:
|
|
user:User3@pve:1:
|
|
user:User4@pve:1:
|
|
|
|
group:DEVEL:User1@pve,User2@pve,User3@pve:
|
|
group:MARKETING:User1@pve,User4@pve:
|
|
|
|
role:RoleDEVEL:VM.PowerMgmt:
|
|
role:RoleMARKETING:VM.Console:
|
|
role:RoleTEST1:VM.Console:
|
|
|
|
acl:1:/pool/devel:@DEVEL:RoleDEVEL:
|
|
acl:1:/pool/marketing:@MARKETING:RoleMARKETING:
|
|
|
|
acl:1:/vms:@DEVEL:RoleTEST1:
|
|
acl:1:/vms:User3@pve:NoAccess:
|
|
acl:1:/vms/300:@MARKETING:RoleTEST1:
|
|
|
|
pool:devel:MITS development:500,501,502:store1 store2:
|
|
pool:marketing:MITS marketing:600:store1:
|