Skip to content

Commit b8c9d87

Browse files
committed
CA-220506: Update rbac role for SR.scan API call.
Allow VM_POWER_ADMIN to perform `SR.scan` in order to allow Storage XenMotion. VM_POWER_ADMIN can perform `VDI.create` and other VDI operations so its safe to perform `SR.scan`. Signed-off-by: Sharad Yadav <[email protected]>
1 parent cb63e8c commit b8c9d87

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

ocaml/idl/datamodel.ml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3667,7 +3667,7 @@ let sr_scan = call
36673667
~in_product_since:rel_rio
36683668
~doc:"Refreshes the list of VDIs associated with an SR"
36693669
~params:[Ref _sr, "sr", "The SR to scan" ]
3670-
~allowed_roles:_R_POOL_OP
3670+
~allowed_roles:_R_VM_POWER_ADMIN
36713671
()
36723672

36733673
(* Nb, although this is a new explicit call, it's actually been in the API since rio - just autogenerated. So no setting of rel_miami. *)

0 commit comments

Comments
 (0)