luci-base, luci-mod-network: migrate luci/getDHCPLeases to C plugin

[project/luci.git] / modules / luci-base / root / usr / share / rpcd / acl.d / luci-base.json

diff --git a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
index de145ce784592c089d549657ecf1937751f857f1..5256c8bb2c1af6587128e4281b9ab1ea56a83234 100644 (file)
--- a/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
+++ b/modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json
@@ -1,4 +1,13 @@
 {
+       "unauthenticated": {
+               "description": "Allow system feature probing",
+               "read": {
+                       "ubus": {
+                               "luci": [ "getFeatures" ]
+                       }
+               }
+       },
+
        "uci-access": {
                "description": "Grant uci write access to all configurations",
                "read": {
@@ -11,20 +20,58 @@
        "luci-access": {
                "description": "Grant access to basic LuCI procedures",
                "read": {
+                       "cgi-io": [ "backup", "download" ],
+                       "file": {
+                               "/": [ "list" ],
+                               "/*": [ "list" ],
+                               "/dev/mtdblock*": [ "read" ],
+                               "/etc/crontabs/root": [ "read" ],
+                               "/etc/dropbear/authorized_keys": [ "read" ],
+                               "/etc/filesystems": [ "read" ],
+                               "/etc/rc.local": [ "read" ],
+                               "/etc/sysupgrade.conf": [ "read" ],
+                               "/etc/passwd": [ "read" ],
+                               "/etc/group": [ "read" ],
+                               "/proc/filesystems": [ "read" ],
+                               "/proc/mtd": [ "read" ],
+                               "/proc/partitions": [ "read" ],
+                               "/proc/sys/kernel/hostname": [ "read" ],
+                               "/proc/mounts": [ "read" ]
+                       },
                        "ubus": {
-                               "iwinfo": [ "info" ],
-                               "luci": [ "boardjson", "duid_hints", "host_hints", "ifaddrs", "initList", "getLocaltime", "leases", "leds", "netdevs", "usb" ],
+                               "file": [ "list", "read", "stat" ],
+                               "iwinfo": [ "assoclist", "freqlist", "txpowerlist", "countrylist" ],
+                               "luci": [ "getDUIDHints", "getHostHints", "getIfaddrs", "getInitList", "getLocaltime", "getTimezones", "getLEDs", "getNetworkDevices", "getUSBDevices", "getWirelessDevices", "getSwconfigFeatures", "getSwconfigPortState", "getBlockDevices", "getMountPoints" ],
+                               "luci-rpc": [ "getBoardJSON", "getDHCPLeases" ],
                                "network.device": [ "status" ],
                                "network.interface": [ "dump" ],
-                               "network.wireless": [ "status" ],
+                               "network": [ "get_proto_handlers" ],
+                               "system": [ "validate_firmware_image" ],
                                "uci": [ "changes", "get" ]
                        },
                        "uci": [ "*" ]
                },
                "write": {
+                       "cgi-io": [ "upload" ],
+                       "file": {
+                               "/etc/crontabs/root": [ "write" ],
+                               "/etc/dropbear/authorized_keys": [ "write" ],
+                               "/etc/luci-uploads/*": [ "write" ],
+                               "/etc/rc.local": [ "write" ],
+                               "/etc/sysupgrade.conf": [ "write" ],
+                               "/sbin/block": [ "exec" ],
+                               "/sbin/firstboot": [ "exec" ],
+                               "/sbin/reboot": [ "exec" ],
+                               "/sbin/sysupgrade": [ "exec" ],
+                               "/bin/tar": [ "exec" ],
+                               "/tmp/backup.tar.gz": [ "write" ],
+                               "/tmp/firmware.bin": [ "write" ]
+                       },
                        "ubus": {
-                               "luci": [ "initCall", "setLocaltime", "timezone" ],
-                               "uci": [ "add", "apply", "confirm", "delete", "order", "set" ]
+                               "file": [ "write", "remove", "exec" ],
+                               "iwinfo": [ "scan" ],
+                               "luci": [ "setInitAction", "setLocaltime", "setPassword", "setBlockDetect", "setUmount", "setReboot" ],
+                               "uci": [ "add", "apply", "confirm", "delete", "order", "set", "rename" ]
                        },
                        "uci": [ "*" ]
                }
@@ -33,7 +80,7 @@
                "description": "Grant access to firewall procedures",
                "read": {
                        "ubus": {
-                               "luci": [ "conntrack_helpers", "offload_support" ]
+                               "luci": [ "getConntrackHelpers" ]
                        },
                        "uci": [ "firewall" ]
                },