gandalf/secubox-openwrt
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: Update ACL files to use proper luci.* ubus object naming

Browse Source 
Updated ACL permissions for 4 modules to use correct ubus object
names with the mandatory 'luci.' prefix:

- luci-app-auth-guardian: auth-guardian → luci.auth-guardian
- luci-app-netifyd-dashboard: netifyd → luci.netifyd-dashboard
- luci-app-network-modes: network-modes → luci.network-modes
- luci-app-wireguard-dashboard: wireguard-dashboard → luci.wireguard-dashboard

Also updated method names and UCI config references to match
current RPCD backend implementations.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
CyberMind-FR 2025-12-26 21:54:00 +01:00
parent 0759c748dd
commit 1122f84e58
4 changed files with 50 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
luci-app-auth-guardian/root/usr/share/rpcd/acl.d/luci-app-auth-guardian.json
View File

@ -3,15 +3,28 @@
"description": "Auth Guardian",
"read": {
"ubus": {
"luci.auth-guardian": ["status", "sessions", "vouchers", "oauth_providers", "bypass_list"]
"luci.auth-guardian": [
"status",
"list_providers",
"list_vouchers",
"list_sessions",
"get_logs"
]
},
"uci": ["authguard"]
"uci": ["auth_guardian"]
},
"write": {
"ubus": {
"luci.auth-guardian": ["generate_voucher"]
"luci.auth-guardian": [
"set_provider",
"delete_provider",
"create_voucher",
"delete_voucher",
"validate_voucher",
"revoke_session"
]
},
"uci": ["authguard"]
"uci": ["auth_guardian"]
}
}
}

14
luci-app-netifyd-dashboard/root/usr/share/rpcd/acl.d/luci-app-netifyd-dashboard.json
View File

@ -3,9 +3,19 @@
"description": "Grant access to LuCI Netifyd Dashboard",
"read": {
"ubus": {
"netifyd": [ "status", "flows", "applications", "protocols", "devices", "stats" ],
"luci.netifyd-dashboard": [
"status",
"flows",
"applications",
"protocols",
"devices",
"stats",
"risks",
"category_bandwidth",
"top_talkers",
"dns_queries"
],
"system": [ "info", "board" ],
"luci-rpc": [ "getNetifydStats" ],
"file": [ "read", "stat" ]
},
"uci": [ "netifyd", "netifyd-dashboard" ]

20
luci-app-network-modes/root/usr/share/rpcd/acl.d/luci-app-network-modes.json
View File

@ -3,17 +3,12 @@
"description": "Grant access to LuCI Network Modes Dashboard",
"read": {
"ubus": {
"network-modes": [
"luci.network-modes": [
"status",
"modes",
"get_current_mode",
"get_available_modes",
"preview_changes",
"sniffer_config",
"ap_config",
"relay_config",
"router_config",
"generate_config"
"get_interfaces",
"validate_config"
],
"system": [ "info", "board" ],
"network.interface": [ "status", "dump" ],
@ -28,13 +23,8 @@
},
"write": {
"ubus": {
"network-modes": [
"set_mode",
"apply_mode",
"confirm_mode",
"rollback",
"update_settings",
"add_vhost"
"luci.network-modes": [
"set_mode"
]
},
"uci": [ "network", "wireless", "firewall", "dhcp", "network-modes" ]

17
luci-app-wireguard-dashboard/root/usr/share/rpcd/acl.d/luci-app-wireguard-dashboard.json
View File

@ -3,7 +3,13 @@
"description": "Grant access to LuCI WireGuard Dashboard",
"read": {
"ubus": {
"wireguard-dashboard": [ "status", "interfaces", "peers", "traffic", "config" ],
"luci.wireguard-dashboard": [
"status",
"get_interfaces",
"get_peers",
"config",
"traffic"
],
"system": [ "info", "board" ],
"file": [ "read", "stat", "exec" ]
},
@ -14,6 +20,15 @@
}
},
"write": {
"ubus": {
"luci.wireguard-dashboard": [
"generate_keys",
"add_peer",
"remove_peer",
"generate_config",
"generate_qr"
]
},
"uci": [ "wireguard-dashboard" ]
}
}