modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json

   1 {
   2         "unauthenticated": {
   3                 "description": "Allow system feature probing",
   4                 "read": {
   5                         "ubus": {
   6                                 "luci": [ "getFeatures" ]
   7                         }
   8                 }
   9         },
  10
  11         "luci-base": {
  12                 "description": "Grant access to basic LuCI procedures",
  13                 "read": {
  14                         "file": {
  15                                 "/": [ "list" ],
  16                                 "/*": [ "list" ]
  17                         },
  18                         "ubus": {
  19                                 "file": [ "list" ],
  20                                 "uci": [ "changes", "get" ]
  21                         }
  22                 },
  23                 "write": {
  24                         "cgi-io": [ "upload" ],
  25                         "file": {
  26                                 "/etc/luci-uploads/*": [ "write" ]
  27                         },
  28                         "ubus": {
  29                                 "file": [ "remove" ],
  30                                 "uci": [ "add", "apply", "confirm", "delete", "order", "rename", "set" ]
  31                         }
  32                 }
  33         },
  34
  35         "luci-base-network-status": {
  36                 "description": "Grant access to network status information",
  37                 "read": {
  38                         "ubus": {
  39                                 "luci-rpc": [ "getBoardJSON", "getHostHints", "getNetworkDevices", "getWirelessDevices" ],
  40                                 "network": [ "get_proto_handlers" ],
  41                                 "network.interface": [ "dump" ]
  42                         },
  43                         "uci": [ "luci", "network", "wireless" ]
  44                 }
  45         }
  46 }