From: Jo-Philipp Wich <jo@mein.io>
Date: Mon, 8 Jul 2019 14:25:30 +0000 (+0200)
Subject: luci-base: add rpcd ACL rules
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=abee9138dec5814b70c9af418c27386a067ba284;p=project%2Fluci.git

luci-base: add rpcd ACL rules

Add required ACL rules to allow access to the native ubus HTTP
interface directly.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
---

diff --git a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
index ed7ad8aa8a..6cbaa3d56d 100644
--- a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
+++ b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
@@ -7,5 +7,26 @@
 		"write": {
 			"uci": [ "*" ]
 		}
+	},
+	"luci-access": {
+		"description": "Grant access to basic LuCI procedures",
+		"read": {
+			"ubus": {
+				"iwinfo": [ "info" ],
+				"luci": [ "boardjson", "duid_hints", "host_hints", "ifaddrs", "initList", "leases", "leds", "netdevs", "offload_support", "usb" ],
+				"network.device": [ "status" ],
+				"network.interface": [ "dump" ],
+				"network.wireless": [ "status" ],
+				"uci": [ "changes", "get" ]
+			},
+			"uci": [ "*" ]
+		},
+		"write": {
+			"ubus": {
+				"luci": [ "initCall", "localtime", "timezone" ],
+				"uci": [ "add", "apply", "confirm", "delete", "order", "set" ]
+			},
+			"uci": [ "*" ]
+		}
 	}
 }