User rights - browse backups

Server
1

Hello,

I’m working on a node.js app that will be used to report UrBackup Status and usage.
I want my app to be able to get to the list of backups but my app should not be able to get the actual backup data - for restore purposes the UrBackup GUI will be used.

Currently when limiting permissions for my app by following the guide here: UrBackup - Server administration manual

If I don’t add browse_backups, I can’t get the list of backups.
If I do, I’ll get access to the actual backup data :frowning:

Any suggestions how to create such app/api user that has all the rights but access to actuall backup data/files

Thank you!

2

I think this is currently not implemented. Will consider adding a separate one for backup access.

3

That would be much appreciated!

This will cover a scenario where is needed only the admin to be able to perform the restore but still the user can see the list of backups and request for specific backup to be restored (id/date/type/etc).

4

Martin, if it helps, I can implement this. My suggestion is a new right, “list_backups”, that only allows listing backups (client, time, type, size), with browse_backups unchanged. That way existing users keep their current permissions. Would that work for you, or would you rather split browse_backups itself?