mirror of
https://github.com/home-assistant/supervisor.git
synced 2025-07-10 10:46:29 +00:00
Create role for backup add-ons (#755)
* Create role for backup add-ons * Update validate.py * Update security.py
This commit is contained in:
parent
8443da0b9f
commit
571c42ef7d
@ -24,7 +24,7 @@ from ..const import (
|
|||||||
PRIVILEGED_NET_ADMIN, PRIVILEGED_SYS_ADMIN, PRIVILEGED_SYS_RAWIO,
|
PRIVILEGED_NET_ADMIN, PRIVILEGED_SYS_ADMIN, PRIVILEGED_SYS_RAWIO,
|
||||||
PRIVILEGED_IPC_LOCK, PRIVILEGED_SYS_TIME, PRIVILEGED_SYS_NICE,
|
PRIVILEGED_IPC_LOCK, PRIVILEGED_SYS_TIME, PRIVILEGED_SYS_NICE,
|
||||||
PRIVILEGED_SYS_RESOURCE, PRIVILEGED_SYS_PTRACE, PRIVILEGED_DAC_READ_SEARCH,
|
PRIVILEGED_SYS_RESOURCE, PRIVILEGED_SYS_PTRACE, PRIVILEGED_DAC_READ_SEARCH,
|
||||||
ROLE_DEFAULT, ROLE_HOMEASSISTANT, ROLE_MANAGER, ROLE_ADMIN)
|
ROLE_DEFAULT, ROLE_HOMEASSISTANT, ROLE_MANAGER, ROLE_ADMIN, ROLE_BACKUP)
|
||||||
from ..validate import (
|
from ..validate import (
|
||||||
NETWORK_PORT, DOCKER_PORTS, ALSA_DEVICE, UUID_MATCH, SHA256)
|
NETWORK_PORT, DOCKER_PORTS, ALSA_DEVICE, UUID_MATCH, SHA256)
|
||||||
from ..services.validate import DISCOVERY_SERVICES
|
from ..services.validate import DISCOVERY_SERVICES
|
||||||
@ -85,6 +85,7 @@ PRIVILEGED_ALL = [
|
|||||||
ROLE_ALL = [
|
ROLE_ALL = [
|
||||||
ROLE_DEFAULT,
|
ROLE_DEFAULT,
|
||||||
ROLE_HOMEASSISTANT,
|
ROLE_HOMEASSISTANT,
|
||||||
|
ROLE_BACKUP,
|
||||||
ROLE_MANAGER,
|
ROLE_MANAGER,
|
||||||
ROLE_ADMIN,
|
ROLE_ADMIN,
|
||||||
]
|
]
|
||||||
|
@ -7,7 +7,7 @@ from aiohttp.web_exceptions import HTTPUnauthorized, HTTPForbidden
|
|||||||
|
|
||||||
from ..const import (
|
from ..const import (
|
||||||
HEADER_TOKEN, REQUEST_FROM, ROLE_ADMIN, ROLE_DEFAULT, ROLE_HOMEASSISTANT,
|
HEADER_TOKEN, REQUEST_FROM, ROLE_ADMIN, ROLE_DEFAULT, ROLE_HOMEASSISTANT,
|
||||||
ROLE_MANAGER)
|
ROLE_MANAGER, ROLE_BACKUP)
|
||||||
from ..coresys import CoreSysAttributes
|
from ..coresys import CoreSysAttributes
|
||||||
|
|
||||||
_LOGGER = logging.getLogger(__name__)
|
_LOGGER = logging.getLogger(__name__)
|
||||||
@ -53,6 +53,11 @@ ADDONS_ROLE_ACCESS = {
|
|||||||
r"|/homeassistant/.+"
|
r"|/homeassistant/.+"
|
||||||
r")$"
|
r")$"
|
||||||
),
|
),
|
||||||
|
ROLE_BACKUP: re.compile(
|
||||||
|
r"^(?:"
|
||||||
|
r"|/snapshots.*"
|
||||||
|
r")$"
|
||||||
|
),
|
||||||
ROLE_MANAGER: re.compile(
|
ROLE_MANAGER: re.compile(
|
||||||
r"^(?:"
|
r"^(?:"
|
||||||
r"|/homeassistant/.+"
|
r"|/homeassistant/.+"
|
||||||
|
@ -256,5 +256,6 @@ FEATURES_SERVICES = 'services'
|
|||||||
|
|
||||||
ROLE_DEFAULT = 'default'
|
ROLE_DEFAULT = 'default'
|
||||||
ROLE_HOMEASSISTANT = 'homeassistant'
|
ROLE_HOMEASSISTANT = 'homeassistant'
|
||||||
|
ROLE_BACKUP = 'backup'
|
||||||
ROLE_MANAGER = 'manager'
|
ROLE_MANAGER = 'manager'
|
||||||
ROLE_ADMIN = 'admin'
|
ROLE_ADMIN = 'admin'
|
||||||
|
Loading…
x
Reference in New Issue
Block a user