Hi, as we has discuted some weeks ago, this patche serie introduce management of acl for vnets && local bridges
I have reuse current sdn permissions path, to have common paths /sdn/vnets/<zone>/<vnet> where the local vmbr are in a virtual "local" zone /sdn/vnets/local/<vnet> Vlans permissions are also handled with /sdn/vnets/<zone>/<vnet>.<tag> if user have permissions on the zone, he have access to all vnets/vlan if user have permissions on the vnet, he have access to all vlans of the vnet if user have permissions on the vnet.tag, he have access to only the specific vlan. I have reworked the sdn zone panel from the tree, to manage permissions on displayed vnets. some screenshots: https://mutulin1.odiso.net/sdnzone-perm.png https://mutulin1.odiso.net/localzone-perm.png patch1-2: can be applied on proxmox7, so users can already add permissions before upgrade to proxmox8 patch3-4: add filtering the displayed local bridges (for proxmox8) Alexandre Derumier (4): add vnet permissions panel add permissions management for "local" network zone api2: network: check permissions for local bridges api2: network: check vlan permissions for local bridges PVE/API2/Cluster.pm | 12 ++ PVE/API2/Network.pm | 33 ++- www/manager6/Makefile | 2 + www/manager6/sdn/Browser.js | 17 +- www/manager6/sdn/VnetACLView.js | 299 +++++++++++++++++++++++++++ www/manager6/sdn/ZoneContentPanel.js | 41 ++++ www/manager6/sdn/ZoneContentView.js | 52 ++++- 7 files changed, 429 insertions(+), 27 deletions(-) create mode 100644 www/manager6/sdn/VnetACLView.js create mode 100644 www/manager6/sdn/ZoneContentPanel.js -- 2.30.2 _______________________________________________ pve-devel mailing list pve-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
