luci2/share/acl.d/luci2.json

   1 {
   2         "unauthenticated": {
   3                 "description": "Functions allowed for unauthenticated requests",
   4                 "read": {
   5                         "ubus": {
   6                                 "luci2.ui": [
   7                                         "themes"
   8                                 ]
   9                         }
  10                 }
  11         },
  12
  13         "core": {
  14                 "description": "Core functions for LuCI",
  15                 "read": {
  16                         "ubus": {
  17                                 "luci2.ui": [
  18                                         "*"
  19                                 ],
  20                                 "session": [
  21                                         "access",
  22                                         "destroy"
  23                                 ],
  24                                 "uci": [
  25                                         "*"
  26                                 ]
  27                         }
  28                 }
  29         },
  30
  31         "status": {
  32                 "description": "Status information display",
  33                 "read": {
  34                         "ubus": {
  35                                 "iwinfo": [
  36                                         "devices",
  37                                         "info",
  38                                         "assoclist"
  39                                 ],
  40                                 "system": [
  41                                         "info",
  42                                         "board"
  43                                 ],
  44                                 "network.interface": [
  45                                         "status"
  46                                 ],
  47                                 "luci2.network": [
  48                                         "conntrack_count",
  49                                         "dhcp_leases",
  50                                         "dhcp6_leases",
  51                                         "arp_table",
  52                                         "routes",
  53                                         "routes6"
  54                                 ],
  55                                 "luci2.system": [
  56                                         "diskfree",
  57                                         "syslog",
  58                                         "dmesg",
  59                                         "process_list"
  60                                 ]
  61                         }
  62                 },
  63                 "write": {
  64                         "ubus": {
  65                                 "luci2.system": [
  66                                         "process_signal"
  67                                 ]
  68                         }
  69                 }
  70         },
  71
  72         "system": {
  73                 "description": "General system settings",
  74                 "read": {
  75                         "ubus": {
  76                                 "system": [
  77                                         "info",
  78                                         "board"
  79                                 ],
  80                                 "luci2.system": [
  81                                         "init_list"
  82                                 ]
  83                         },
  84                         "uci": [
  85                                 "luci"
  86                         ]
  87                 },
  88                 "write": {
  89                         "ubus": {
  90                                 "luci2.system": [
  91                                         "init_action"
  92                                 ]
  93                         },
  94                         "uci": [
  95                                 "luci"
  96                         ]
  97                 }
  98         },
  99
 100         "admin": {
 101                 "description": "Authentication and SSH settings",
 102                 "read": {
 103                         "ubus": {
 104                                 "luci2.system": [
 105                                         "sshkeys_get"
 106                                 ]
 107                         },
 108                         "uci": [
 109                                 "dropbear"
 110                         ]
 111                 },
 112                 "write": {
 113                         "ubus": {
 114                                 "luci2.system": [
 115                                         "sshkeys_set",
 116                                         "password_set"
 117                                 ]
 118                         },
 119                         "uci": [
 120                                 "dropbear"
 121                         ]
 122                 }
 123         },
 124
 125         "users": {
 126                 "description": "Guest login settings",
 127                 "read": {
 128                         "uci": [
 129                                 "rpcd"
 130                         ]
 131                 },
 132                 "write": {
 133                         "uci": [
 134                                 "rpcd"
 135                         ]
 136                 }
 137         },
 138
 139         "software": {
 140                 "description": "Package management",
 141                 "read": {
 142                         "ubus": {
 143                                 "system": [
 144                                         "info",
 145                                         "board"
 146                                 ],
 147                                 "luci2.opkg": [
 148                                         "list",
 149                                         "list_installed",
 150                                         "find",
 151                                         "config_get"
 152                                 ]
 153                         }
 154                 },
 155                 "write": {
 156                         "ubus": {
 157                                 "luci2.opkg": [
 158                                         "install",
 159                                         "remove",
 160                                         "update",
 161                                         "config_set"
 162                                 ]
 163                         }
 164                 }
 165         },
 166
 167         "upgrade": {
 168                 "description": "Firmware upgrade",
 169                 "read": {
 170                         "ubus": {
 171                                 "luci2.system": [
 172                                         "upgrade_test",
 173                                         "reset_test"
 174                                 ]
 175                         }
 176                 },
 177                 "write": {
 178                         "luci-io": [
 179                                 "upload"
 180                         ],
 181                         "ubus": {
 182                                 "luci2.system": [
 183                                         "upgrade_start",
 184                                         "upgrade_clean",
 185                                         "reset_start",
 186                                         "reboot"
 187                                 ]
 188                         }
 189                 }
 190         },
 191
 192         "backup": {
 193                 "description": "Backup and Restore",
 194                 "read": {
 195                         "luci-io": [
 196                                 "backup"
 197                         ],
 198                         "ubus": {
 199                                 "luci2.system": [
 200                                         "backup_config_get",
 201                                         "backup_list"
 202                                 ]
 203                         }
 204                 },
 205                 "write": {
 206                         "ubus": {
 207                                 "luci2.system": [
 208                                         "backup_clean",
 209                                         "backup_config_set",
 210                                         "backup_restore",
 211                                         "reboot"
 212                                 ]
 213                         }
 214                 }
 215         },
 216
 217         "startup": {
 218                 "description": "System boot settings",
 219                 "read": {
 220                         "ubus": {
 221                                 "luci2.system": [
 222                                         "init_list",
 223                                         "rclocal_get"
 224                                 ]
 225                         }
 226                 },
 227                 "write": {
 228                         "ubus": {
 229                                 "luci2.system": [
 230                                         "init_action",
 231                                         "rclocal_set"
 232                                 ]
 233                         }
 234                 }
 235         },
 236
 237         "cron": {
 238                 "description": "Crontab management",
 239                 "read": {
 240                         "ubus": {
 241                                 "luci2.system": [
 242                                         "crontab_get"
 243                                 ]
 244                         }
 245                 },
 246                 "write": {
 247                         "ubus": {
 248                                 "luci2.system": [
 249                                         "crontab_set"
 250                                 ]
 251                         }
 252                 }
 253         },
 254
 255         "leds": {
 256                 "description": "Hardware LED configuration",
 257                 "read": {
 258                         "ubus": {
 259                                 "network.device": [
 260                                         "status"
 261                                 ],
 262                                 "luci2.system": [
 263                                         "led_list",
 264                                         "usb_list"
 265                                 ]
 266                         },
 267                         "uci": [
 268                                 "system"
 269                         ]
 270                 },
 271                 "write": {
 272                         "uci": [
 273                                 "system"
 274                         ]
 275                 }
 276         },
 277
 278         "switch": {
 279                 "description": "Ethernet switch configuration",
 280                 "read": {
 281                         "ubus": {
 282                                 "luci2.network": [
 283                                         "switch_list",
 284                                         "switch_info",
 285                                         "switch_status"
 286                                 ]
 287                         },
 288                         "uci": [
 289                                 "network"
 290                         ]
 291                 },
 292                 "write": {
 293                         "uci": [
 294                                 "network"
 295                         ]
 296                 }
 297         },
 298
 299         "diagnostics": {
 300                 "description": "Network diagnostic tools",
 301                 "read": {
 302                         "ubus": {
 303                                 "luci2.network": [
 304                                         "ping",
 305                                         "ping6",
 306                                         "traceroute",
 307                                         "traceroute6",
 308                                         "nslookup"
 309                                 ]
 310                         }
 311                 }
 312         }
 313 }