luci2/share/acl.d/luci2.json

   1 {
   2         "unauthenticated": {
   3                 "description": "Functions allowed for unauthenticated requests",
   4                 "read": {
   5                         "ubus": {
   6                                 "luci2.ui": [
   7                                         "themes"
   8                                 ]
   9                         }
  10                 }
  11         },
  12
  13         "core": {
  14                 "description": "Core functions for LuCI",
  15                 "read": {
  16                         "ubus": {
  17                                 "luci2.ui": [
  18                                         "*"
  19                                 ],
  20                                 "session": [
  21                                         "access",
  22                                         "destroy"
  23                                 ],
  24                                 "uci": [
  25                                         "*"
  26                                 ]
  27                         }
  28                 }
  29         },
  30
  31         "status": {
  32                 "description": "Status information display",
  33                 "read": {
  34                         "ubus": {
  35                                 "iwinfo": [
  36                                         "devices",
  37                                         "info",
  38                                         "assoclist",
  39                                         "phyname"
  40                                 ],
  41                                 "system": [
  42                                         "info",
  43                                         "board"
  44                                 ],
  45                                 "network.interface": [
  46                                         "status"
  47                                 ],
  48                                 "luci2.network": [
  49                                         "conntrack_count",
  50                                         "dhcp_leases",
  51                                         "dhcp6_leases",
  52                                         "arp_table",
  53                                         "routes",
  54                                         "routes6"
  55                                 ],
  56                                 "luci2.system": [
  57                                         "diskfree",
  58                                         "syslog",
  59                                         "dmesg",
  60                                         "process_list"
  61                                 ]
  62                         }
  63                 },
  64                 "write": {
  65                         "ubus": {
  66                                 "luci2.system": [
  67                                         "process_signal"
  68                                 ]
  69                         }
  70                 }
  71         },
  72
  73         "system": {
  74                 "description": "General system settings",
  75                 "read": {
  76                         "ubus": {
  77                                 "system": [
  78                                         "info",
  79                                         "board"
  80                                 ],
  81                                 "luci2.system": [
  82                                         "init_list"
  83                                 ]
  84                         },
  85                         "uci": [
  86                                 "luci"
  87                         ]
  88                 },
  89                 "write": {
  90                         "ubus": {
  91                                 "luci2.system": [
  92                                         "init_action"
  93                                 ]
  94                         },
  95                         "uci": [
  96                                 "luci"
  97                         ]
  98                 }
  99         },
 100
 101         "admin": {
 102                 "description": "Authentication and SSH settings",
 103                 "read": {
 104                         "ubus": {
 105                                 "luci2.system": [
 106                                         "sshkeys_get"
 107                                 ]
 108                         },
 109                         "uci": [
 110                                 "dropbear"
 111                         ]
 112                 },
 113                 "write": {
 114                         "ubus": {
 115                                 "luci2.system": [
 116                                         "sshkeys_set",
 117                                         "password_set"
 118                                 ]
 119                         },
 120                         "uci": [
 121                                 "dropbear"
 122                         ]
 123                 }
 124         },
 125
 126         "users": {
 127                 "description": "Guest login settings",
 128                 "read": {
 129                         "uci": [
 130                                 "rpcd"
 131                         ]
 132                 },
 133                 "write": {
 134                         "uci": [
 135                                 "rpcd"
 136                         ]
 137                 }
 138         },
 139
 140         "software": {
 141                 "description": "Package management",
 142                 "read": {
 143                         "ubus": {
 144                                 "system": [
 145                                         "info",
 146                                         "board"
 147                                 ],
 148                                 "luci2.opkg": [
 149                                         "list",
 150                                         "list_installed",
 151                                         "find",
 152                                         "config_get"
 153                                 ]
 154                         }
 155                 },
 156                 "write": {
 157                         "ubus": {
 158                                 "luci2.opkg": [
 159                                         "install",
 160                                         "remove",
 161                                         "update",
 162                                         "config_set"
 163                                 ]
 164                         }
 165                 }
 166         },
 167
 168         "upgrade": {
 169                 "description": "Firmware upgrade",
 170                 "read": {
 171                         "ubus": {
 172                                 "luci2.system": [
 173                                         "upgrade_test",
 174                                         "reset_test"
 175                                 ]
 176                         }
 177                 },
 178                 "write": {
 179                         "luci-io": [
 180                                 "upload"
 181                         ],
 182                         "ubus": {
 183                                 "luci2.system": [
 184                                         "upgrade_start",
 185                                         "upgrade_clean",
 186                                         "reset_start",
 187                                         "reboot"
 188                                 ]
 189                         }
 190                 }
 191         },
 192
 193         "backup": {
 194                 "description": "Backup and Restore",
 195                 "read": {
 196                         "luci-io": [
 197                                 "backup"
 198                         ],
 199                         "ubus": {
 200                                 "luci2.system": [
 201                                         "backup_config_get",
 202                                         "backup_list"
 203                                 ]
 204                         }
 205                 },
 206                 "write": {
 207                         "ubus": {
 208                                 "luci2.system": [
 209                                         "backup_clean",
 210                                         "backup_config_set",
 211                                         "backup_restore",
 212                                         "reboot"
 213                                 ]
 214                         }
 215                 }
 216         },
 217
 218         "startup": {
 219                 "description": "System boot settings",
 220                 "read": {
 221                         "ubus": {
 222                                 "luci2.system": [
 223                                         "init_list",
 224                                         "rclocal_get"
 225                                 ]
 226                         }
 227                 },
 228                 "write": {
 229                         "ubus": {
 230                                 "luci2.system": [
 231                                         "init_action",
 232                                         "rclocal_set"
 233                                 ]
 234                         }
 235                 }
 236         },
 237
 238         "cron": {
 239                 "description": "Crontab management",
 240                 "read": {
 241                         "ubus": {
 242                                 "luci2.system": [
 243                                         "crontab_get"
 244                                 ]
 245                         }
 246                 },
 247                 "write": {
 248                         "ubus": {
 249                                 "luci2.system": [
 250                                         "crontab_set"
 251                                 ]
 252                         }
 253                 }
 254         },
 255
 256         "leds": {
 257                 "description": "Hardware LED configuration",
 258                 "read": {
 259                         "ubus": {
 260                                 "network.device": [
 261                                         "status"
 262                                 ],
 263                                 "luci2.system": [
 264                                         "led_list",
 265                                         "usb_list"
 266                                 ]
 267                         },
 268                         "uci": [
 269                                 "system"
 270                         ]
 271                 },
 272                 "write": {
 273                         "uci": [
 274                                 "system"
 275                         ]
 276                 }
 277         },
 278
 279         "diagnostics": {
 280                 "description": "Network diagnostic tools",
 281                 "read": {
 282                         "ubus": {
 283                                 "luci2.network": [
 284                                         "ping",
 285                                         "ping6",
 286                                         "traceroute",
 287                                         "traceroute6",
 288                                         "nslookup"
 289                                 ]
 290                         }
 291                 }
 292         },
 293
 294         "hostnames": {
 295                 "description": "Host entry management",
 296                 "read": {
 297                         "uci": [
 298                                 "dhcp"
 299                         ]
 300                 },
 301                 "write": {
 302                         "uci": [
 303                                 "dhcp"
 304                         ]
 305                 }
 306         },
 307
 308         "network": {
 309                 "description": "Network, switch and routing configuration",
 310                 "read": {
 311                         "ubus": {
 312                                 "network": [
 313                                         "get_proto_handlers"
 314                                 ],
 315                                 "network.device": [
 316                                         "status"
 317                                 ],
 318                                 "network.interface": [
 319                                         "dump"
 320                                 ],
 321                                 "network.wireless": [
 322                                         "status"
 323                                 ],
 324                                 "luci2.network": [
 325                                         "switch_list",
 326                                         "switch_info",
 327                                         "switch_status",
 328                                         "device_list"
 329                                 ],
 330                                 "luci2.network.bwmon": [
 331                                         "devices",
 332                                         "statistics"
 333                                 ]
 334                         },
 335                         "uci": [
 336                                 "network",
 337                                 "wireless"
 338                         ]
 339                 },
 340                 "write": {
 341                         "uci": [
 342                                 "network",
 343                                 "wireless"
 344                         ]
 345                 }
 346         },
 347
 348         "firewall": {
 349                 "description": "Firewall configuration",
 350                 "read": {
 351                         "uci": [
 352                                 "firewall"
 353                         ]
 354                 },
 355                 "write": {
 356                         "uci": [
 357                                 "firewall"
 358                         ]
 359                 }
 360         }
 361 }