From 02de3e4a2b08d2fb9d4f08b83a2526337671b6e2 Mon Sep 17 00:00:00 2001
From: Paul Spooren <mail@aparcar.org>
Date: Sun, 20 Jun 2021 22:27:25 -1000
Subject: [PATCH] luci-app-attendedsysupgrade: fix ACL definition

Fix the ACL file which handles the permissions for the LuCI app.

Suggested-by: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Paul Spooren <mail@aparcar.org>
---
 .../acl.d/luci-app-attendedsysupgrade.json    | 31 +++++++++++++++----
 1 file changed, 25 insertions(+), 6 deletions(-)

diff --git a/applications/luci-app-attendedsysupgrade/root/usr/share/rpcd/acl.d/luci-app-attendedsysupgrade.json b/applications/luci-app-attendedsysupgrade/root/usr/share/rpcd/acl.d/luci-app-attendedsysupgrade.json
index e3ceeaa35d..ec102e3dad 100644
--- a/applications/luci-app-attendedsysupgrade/root/usr/share/rpcd/acl.d/luci-app-attendedsysupgrade.json
+++ b/applications/luci-app-attendedsysupgrade/root/usr/share/rpcd/acl.d/luci-app-attendedsysupgrade.json
@@ -2,16 +2,35 @@
 	"luci-app-attendedsysupgrade": {
 		"description": "Grant UCI access to LuCI app attendedsysupgrade",
 		"read": {
-			"uci": ["attendedsysupgrade"],
 			"ubus": {
-				"rpc-sys": ["upgrade_start", "packagelist"]
-			}
+				"rpc-sys": [
+					"upgrade_start",
+					"packagelist"
+				],
+				"system": [
+					"board",
+					"info"
+				],
+				"uci": [
+					"get"
+				]
+			},
+			"uci": [
+				"attendedsysupgrade"
+			]
 		},
 		"write": {
-			"uci": ["attendedsysupgrade"],
+			"cgi-io": [
+				"upload"
+			],
 			"ubus": {
-				"rpc-sys": ["upgrade_start"]
-			}
+				"uci": [
+					"set", "commit"
+				]
+			},
+			"uci": [
+				"attendedsysupgrade"
+			]
 		}
 	}
 }
-- 
2.30.2