[pve-devel] [PATCH v3 access-control] add ui capabilities endpoint

Thomas Lamprecht t.lamprecht at proxmox.com
Wed Sep 9 21:00:43 CEST 2020


On 06.07.20 14:45, Tim Marx wrote:
> Signed-off-by: Tim Marx <t.marx at proxmox.com>
> ---
> * no changes

Maybe we could merge this into the "/access/permissions" endpoint, maybe with a
"heurisitic" parameter?

> 
>  PVE/API2/AccessControl.pm | 29 +++++++++++++++++++++++++++++
>  1 file changed, 29 insertions(+)
> 
> diff --git a/PVE/API2/AccessControl.pm b/PVE/API2/AccessControl.pm
> index fd27786..66319cc 100644
> --- a/PVE/API2/AccessControl.pm
> +++ b/PVE/API2/AccessControl.pm
> @@ -718,4 +718,33 @@ __PACKAGE__->register_method({
>  	return $res;
>      }});
> 
> +__PACKAGE__->register_method({
> +    name => 'uicapabilities',
> +    path => 'uicapabilities',
> +    method => 'GET',
> +    description => 'Retrieve user interface capabilities for calling user/token.',
> +    permissions => {
> +	description => "Each user/token is allowed to retrieve their own capabilities.",
> +	user => 'all',
> +    },
> +    parameters => {},
> +    returns => {
> +	type => 'object',
> +	properties => {
> +	    cap => {
> +		type => 'object',
> +		description => 'The user interface capabilities of the calling user/token'
> +	    }
> +	},
> +    },
> +    code => sub {
> +	my ($param) = @_;
> +
> +	my $rpcenv = PVE::RPCEnvironment::get();
> +	my $userid = $rpcenv->get_user();
> +	my $res->{cap} = &$compute_api_permission($rpcenv, $userid);
> +
> +	return $res;
> +    }});
> +
>  1;
> --
> 2.20.1
> 
> _______________________________________________
> pve-devel mailing list
> pve-devel at pve.proxmox.com
> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
> 







More information about the pve-devel mailing list