modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json

   1 {
   2         "unauthenticated": {
   3                 "description": "Allow system feature probing",
   4                 "read": {
   5                         "ubus": {
   6                                 "luci": [ "getFeatures" ]
   7                         }
   8                 }
   9         },
  10
  11         "uci-access": {
  12                 "description": "Grant uci write access to all configurations",
  13                 "read": {
  14                         "uci": [ "*" ]
  15                 },
  16                 "write": {
  17                         "uci": [ "*" ]
  18                 }
  19         },
  20         "luci-access": {
  21                 "description": "Grant access to basic LuCI procedures",
  22                 "read": {
  23                         "file": {
  24                                 "/": [ "list" ],
  25                                 "/*": [ "list" ]
  26                         },
  27                         "ubus": {
  28                                 "file": [ "list", "stat" ],
  29                                 "iwinfo": [ "assoclist", "freqlist", "txpowerlist", "countrylist" ],
  30                                 "luci": [ "getBoardJSON", "getDUIDHints", "getHostHints", "getIfaddrs", "getInitList", "getLocaltime", "getTimezones", "getDHCPLeases", "getLEDs", "getNetworkDevices", "getUSBDevices", "getHostname", "getWirelessDevices" ],
  31                                 "network.device": [ "status" ],
  32                                 "network.interface": [ "dump" ],
  33                                 "network": [ "get_proto_handlers" ],
  34                                 "uci": [ "changes", "get" ]
  35                         },
  36                         "uci": [ "*" ]
  37                 },
  38                 "write": {
  39                         "cgi-io": [ "upload", "/etc/luci-uploads/*" ],
  40                         "file": {
  41                                 "/etc/luci-uploads/*": [ "write" ]
  42                         },
  43                         "ubus": {
  44                                 "file": [ "remove" ],
  45                                 "iwinfo": [ "scan" ],
  46                                 "luci": [ "setInitAction", "setLocaltime" ],
  47                                 "uci": [ "add", "apply", "confirm", "delete", "order", "set", "rename" ]
  48                         },
  49                         "uci": [ "*" ]
  50                 }
  51         },
  52         "luci-app-firewall": {
  53                 "description": "Grant access to firewall procedures",
  54                 "read": {
  55                         "ubus": {
  56                                 "luci": [ "getConntrackHelpers" ]
  57                         },
  58                         "uci": [ "firewall" ]
  59                 },
  60                 "write": {
  61                         "uci": [ "firewall" ]
  62                 }
  63         }
  64 }