From 9f8ba326ce83339d9ad3df3401f525b8b194ea6a Mon Sep 17 00:00:00 2001
From: Thomas Lamprecht <t.lamprecht@proxmox.com>
Date: Thu, 24 Feb 2022 13:21:55 +0100
Subject: [PATCH] restore: early check cloud init target AllocateSpace
 permission

Originally-by: Matthias Heiserer <m.heiserer@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
---
 PVE/QemuServer.pm | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/PVE/QemuServer.pm b/PVE/QemuServer.pm
index 0baf40a2..d4fc1787 100644
--- a/PVE/QemuServer.pm
+++ b/PVE/QemuServer.pm
@@ -6272,6 +6272,9 @@ my $parse_backup_hints = sub {
 		die "Content type 'images' is not available on storage '$storeid'\n"
 		    if !$scfg->{content}->{images};
 
+		$rpcenv->check($user, "/storage/$storeid", ['Datastore.AllocateSpace'])
+		    if $user ne 'root@pam';
+
 		$virtdev_hash->{$virtdev} = {
 		    format => $format,
 		    storeid => $storeid,