modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json

   1 {
   2         "uci-access": {
   3                 "description": "Grant uci write access to all configurations",
   4                 "read": {
   5                         "uci": [ "*" ]
   6                 },
   7                 "write": {
   8                         "uci": [ "*" ]
   9                 }
  10         },
  11         "luci-access": {
  12                 "description": "Grant access to basic LuCI procedures",
  13                 "read": {
  14                         "ubus": {
  15                                 "iwinfo": [ "info" ],
  16                                 "luci": [ "boardjson", "duid_hints", "host_hints", "ifaddrs", "initList", "getLocaltime", "leases", "leds", "netdevs", "usb" ],
  17                                 "network.device": [ "status" ],
  18                                 "network.interface": [ "dump" ],
  19                                 "network.wireless": [ "status" ],
  20                                 "uci": [ "changes", "get" ]
  21                         },
  22                         "uci": [ "*" ]
  23                 },
  24                 "write": {
  25                         "ubus": {
  26                                 "luci": [ "initCall", "setLocaltime", "timezone" ],
  27                                 "uci": [ "add", "apply", "confirm", "delete", "order", "set" ]
  28                         },
  29                         "uci": [ "*" ]
  30                 }
  31         },
  32         "luci-app-firewall": {
  33                 "description": "Grant access to firewall procedures",
  34                 "read": {
  35                         "ubus": {
  36                                 "luci": [ "conntrack_helpers", "offload_support" ]
  37                         },
  38                         "uci": [ "firewall" ]
  39                 },
  40                 "write": {
  41                         "uci": [ "firewall" ]
  42                 }
  43         }
  44 }