Fix missing permissions and update the documentation

fixes #12483

diff --git a/doc/12-icinga2-api.md b/doc/12-icinga2-api.md
index 8c29b554eece3ebe192c5384626fbfd3a911d433..9f18a2d8faf25cc8a611d58a2a3be313f95720be 100644 (file)
--- a/doc/12-icinga2-api.md
+++ b/doc/12-icinga2-api.md
@@ -203,13 +203,16 @@ Available permissions for specific URL endpoints:
   actions/<action>        | /v1/actions   | Yes
   config/query                  | /v1/config    | No
   config/modify                 | /v1/config    | No
+  console                       | /v1/console   | No
+  events/<type>           | /v1/events    | No
   objects/query/<type>    | /v1/objects   | Yes
   objects/create/<type>   | /v1/objects   | No
   objects/modify/<type>   | /v1/objects   | Yes
   objects/delete/<type>   | /v1/objects   | Yes
   status/query                  | /v1/status    | Yes
-  events/<type>           | /v1/events    | No
-  console                       | /v1/console   | No
+  templates/<type>        | /v1/templates | Yes
+  types                         | /v1/types     | Yes
+  variables                     | /v1/variables | Yes
 
 The required actions or types can be replaced by using a wildcard match ("\*").
 

diff --git a/lib/remote/typequeryhandler.cpp b/lib/remote/typequeryhandler.cpp
index b93d67f2b131546e368b3f5d33745033e6127974..c76cc32f8a2d47d0926377cddc54b9eba8356267 100644 (file)
--- a/lib/remote/typequeryhandler.cpp
+++ b/lib/remote/typequeryhandler.cpp
@@ -74,6 +74,7 @@ bool TypeQueryHandler::HandleRequest(const ApiUser::Ptr& user, HttpRequest& requ
 
        QueryDescription qd;
        qd.Types.insert("Type");
+       qd.Permission = "types";
        qd.Provider = new TypeTargetProvider();
 
        if (params->Contains("type"))

diff --git a/lib/remote/variablequeryhandler.cpp b/lib/remote/variablequeryhandler.cpp
index 33888b6c560dfdfa06a8b5a1cb1fab2bab6e8b4c..37409eccd7ae8ad7cd4f053a6f354f7567947650 100644 (file)
--- a/lib/remote/variablequeryhandler.cpp
+++ b/lib/remote/variablequeryhandler.cpp
@@ -83,6 +83,7 @@ bool VariableQueryHandler::HandleRequest(const ApiUser::Ptr& user, HttpRequest&
 
        QueryDescription qd;
        qd.Types.insert("Variable");
+       qd.Permission = "variables";
        qd.Provider = new VariableTargetProvider();
 
        params->Set("type", "Variable");