summaryrefslogtreecommitdiffhomepage
path: root/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
blob: a0852eaec575d3f93873a3db190dec4da8fc42dc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
{
	"unauthenticated": {
		"description": "Allow system feature probing",
		"read": {
			"ubus": {
				"luci": [ "getFeatures" ]
			}
		}
	},

	"uci-access": {
		"description": "Grant uci write access to all configurations",
		"read": {
			"uci": [ "*" ]
		},
		"write": {
			"uci": [ "*" ]
		}
	},
	"luci-access": {
		"description": "Grant access to basic LuCI procedures",
		"read": {
			"file": {
				"/": [ "list" ],
				"/*": [ "list" ],
				"/proc/sys/kernel/hostname": [ "read" ]
			},
			"ubus": {
				"file": [ "list", "read", "stat" ],
				"iwinfo": [ "assoclist", "freqlist", "txpowerlist", "countrylist" ],
				"luci": [ "getBoardJSON", "getDUIDHints", "getHostHints", "getIfaddrs", "getInitList", "getLocaltime", "getTimezones", "getDHCPLeases", "getLEDs", "getNetworkDevices", "getUSBDevices", "getWirelessDevices", "getSwconfigFeatures", "getSwconfigPortState" ],
				"network.device": [ "status" ],
				"network.interface": [ "dump" ],
				"network": [ "get_proto_handlers" ],
				"uci": [ "changes", "get" ]
			},
			"uci": [ "*" ]
		},
		"write": {
			"cgi-io": [ "upload", "/etc/luci-uploads/*" ],
			"file": {
				"/etc/luci-uploads/*": [ "write" ]
			},
			"ubus": {
				"file": [ "remove" ],
				"iwinfo": [ "scan" ],
				"luci": [ "setInitAction", "setLocaltime" ],
				"uci": [ "add", "apply", "confirm", "delete", "order", "set", "rename" ]
			},
			"uci": [ "*" ]
		}
	},
	"luci-app-firewall": {
		"description": "Grant access to firewall procedures",
		"read": {
			"ubus": {
				"luci": [ "getConntrackHelpers" ]
			},
			"uci": [ "firewall" ]
		},
		"write": {
			"uci": [ "firewall" ]
		}
	}
}