From 4a4e59dc63af81932a1a994f13eecaaadad09df3 Mon Sep 17 00:00:00 2001
From: CyberMind-FR <gandalf@Gk2.net>
Date: Fri, 26 Dec 2025 06:38:52 +0100
Subject: [PATCH] fix: add UCI permissions to secubox ACL for settings page
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Resolved RPC error "Permission denied" when accessing /admin/secubox/settings

Changes:
- Added UCI read permissions (get, state) to luci-app-secubox ACL
- Added UCI write permissions (set, delete, commit, apply) to luci-app-secubox ACL
- Added "secubox" to UCI config permissions (read and write)
- Added missing ksm_manager module to secubox config

The settings page requires UCI access to load and save the secubox configuration.
Without these permissions, users got "ubus code 6: Permission denied" errors.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
---
 luci-app-secubox/root/etc/config/secubox      | 11 ++++++++++
 .../share/rpcd/acl.d/luci-app-secubox.json    | 20 +++++++++++++++++--
 2 files changed, 29 insertions(+), 2 deletions(-)

diff --git a/luci-app-secubox/root/etc/config/secubox b/luci-app-secubox/root/etc/config/secubox
index f44e8312..81444a45 100644
--- a/luci-app-secubox/root/etc/config/secubox
+++ b/luci-app-secubox/root/etc/config/secubox
@@ -150,3 +150,14 @@ config module 'traffic_shaper'
 	option config 'traffic_shaper'
 	option installed '0'
 	option enabled '0'
+
+config module 'ksm_manager'
+	option name 'KSM Manager'
+	option description 'Key Storage & HSM management'
+	option category 'security'
+	option icon 'key'
+	option color '#ef4444'
+	option package 'luci-app-ksm-manager'
+	option config 'ksm_manager'
+	option installed '0'
+	option enabled '0'
diff --git a/luci-app-secubox/root/usr/share/rpcd/acl.d/luci-app-secubox.json b/luci-app-secubox/root/usr/share/rpcd/acl.d/luci-app-secubox.json
index efe9926e..a2f863c5 100644
--- a/luci-app-secubox/root/usr/share/rpcd/acl.d/luci-app-secubox.json
+++ b/luci-app-secubox/root/usr/share/rpcd/acl.d/luci-app-secubox.json
@@ -13,8 +13,15 @@
                     "get_system_health",
                     "get_alerts",
                     "get_dashboard_data"
+                ],
+                "uci": [
+                    "get",
+                    "state"
                 ]
-            }
+            },
+            "uci": [
+                "secubox"
+            ]
         },
         "write": {
             "ubus": {
@@ -23,8 +30,17 @@
                     "stop_module",
                     "restart_module",
                     "quick_action"
+                ],
+                "uci": [
+                    "set",
+                    "delete",
+                    "commit",
+                    "apply"
                 ]
-            }
+            },
+            "uci": [
+                "secubox"
+            ]
         }
     }
 }