mirror of
https://github.com/vatesfr/xen-orchestra.git
synced 2026-11-09 17:06:13 -06:00
docs(aclv2): fix broken links to and from the new ACLv2 page (#9796)
docs(aclv2): fix broken links The ACLv2 page was created and merged at roughly the same time we split the documentation pages into two sections (XO6 and XO5), so the change in file structure broke some links to and from that ACLv2 page. This commit fixes the links so that the Docusaurus build can complete without errors. Signed-off-by: Thomas Moraine <thomas.moraine@vates.tech>
This commit is contained in:
@@ -17,7 +17,7 @@ Our REST API is versioned, and the current version is `/v0` (see URL format belo
|
||||
Most endpoints require authentication. For this, you can either attach a valid authentication token as a cookie, or use the [Authorization header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Authorization)
|
||||
|
||||
:::tip
|
||||
Admin users have access to all REST API endpoints. Non-admin users can use the REST API according to the [ACL v2 / RBAC](./acl-v2.md) permissions defined on their account.
|
||||
Admin users have access to all REST API endpoints. Non-admin users can use the REST API according to the [ACL v2 / RBAC](../xo6/acl-v2.md) permissions defined on their account.
|
||||
:::
|
||||
|
||||
### Usage
|
||||
|
||||
@@ -44,7 +44,7 @@ A privilege defines:
|
||||
- **resource** — the type of object (e.g. `vm`, `backup-job`, `sr`)
|
||||
- **action** — what operation is allowed or denied (e.g. `read`, `start`, `delete`)
|
||||
- **effect** — whether the privilege grants (`allow`) or blocks (`deny`) the action
|
||||
- **selector** _(optional)_ — a filter expression to restrict the privilege to a subset of objects ([complex-matcher format](./manage_infrastructure.md#filter-syntax))
|
||||
- **selector** _(optional)_ — a filter expression to restrict the privilege to a subset of objects ([complex-matcher format](../xo5/manage_infrastructure.md#filter-syntax))
|
||||
|
||||
### Action hierarchy
|
||||
|
||||
@@ -74,7 +74,7 @@ To use them, **copy** a template into a new role and assign that copy to your us
|
||||
| **VMs creator** | Can instantiate VM templates and create VDIs and VIFs. |
|
||||
| **VMs read only** | Can only list and view VMs. |
|
||||
|
||||

|
||||

|
||||
|
||||
---
|
||||
|
||||
@@ -212,7 +212,7 @@ Carol can start, stop, delete, snapshot any VM she wants. Production VMs are com
|
||||
|
||||
### Step 1 — Create a role
|
||||
|
||||

|
||||

|
||||
|
||||
Response:
|
||||
|
||||
@@ -222,23 +222,23 @@ Response:
|
||||
|
||||
### Step 2 — Add privileges to the role
|
||||
|
||||

|
||||

|
||||
|
||||
### Step 3 — Assign the role to the user
|
||||
|
||||

|
||||

|
||||
|
||||
The user can now list VMs.
|
||||
|
||||
To assign to a group instead (all group members inherit the role):
|
||||
|
||||

|
||||

|
||||
|
||||
---
|
||||
|
||||
## Selectors
|
||||
|
||||
By default, a privilege applies to **all** objects of the given resource type. The optional `selector` field narrows it down using the [complex-matcher](./manage_infrastructure#filter-syntax) syntax — the same filter syntax used in the XO UI.
|
||||
By default, a privilege applies to **all** objects of the given resource type. The optional `selector` field narrows it down using the [complex-matcher](../xo5/manage_infrastructure#filter-syntax) syntax — the same filter syntax used in the XO UI.
|
||||
|
||||
A selector is evaluated against each object's properties. If it matches, the privilege applies; otherwise it does not.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user