mirror of
https://github.com/drakkan/sftpgo.git
synced 2024-11-21 23:20:24 +00:00
3dd412f6e3
Our permissions system for admin users is too granular and some permissions overlap. For example, you can define an administrator with the "manage_system" permission and not with the "manage_admins" or "manage_user" permission, but the "manage_system" permission allows you to restore a backup and then create users and administrators. The following permissions will be removed: "manage_admins", "manage_apikeys", "manage_system", "retention_checks", "manage_event_rules", "manage_roles", "manage_ip_lists". Now you need to add the "*" permission to replace the removed granular permissions because the removed permissions allow actions that should only be allowed to super administrators. There is no point in having separate, overlapping permissions. Signed-off-by: Nicola Murino <nicola.murino@gmail.com> |
||
|---|---|---|
| .. | ||
| actions.go | ||
| admin.go | ||
| apikey.go | ||
| bolt.go | ||
| bolt_disabled.go | ||
| cachedpassword.go | ||
| cacheduser.go | ||
| configs.go | ||
| dataprovider.go | ||
| eventrule.go | ||
| group.go | ||
| iplist.go | ||
| memory.go | ||
| mysql.go | ||
| mysql_disabled.go | ||
| node.go | ||
| pgsql.go | ||
| pgsql_disabled.go | ||
| quotaupdater.go | ||
| role.go | ||
| scheduler.go | ||
| session.go | ||
| share.go | ||
| sqlcommon.go | ||
| sqlite.go | ||
| sqlite_disabled.go | ||
| sqlqueries.go | ||
| unixcrypt.go | ||
| unixcrypt_disabled.go | ||
| user.go | ||