treewide: stage ACL rules for legacy applications

[oweals/luci.git] / applications / luci-app-openvpn / root / usr / share / rpcd / acl.d / luci-app-openvpn.json

diff --git a/applications/luci-app-openvpn/root/usr/share/rpcd/acl.d/luci-app-openvpn.json b/applications/luci-app-openvpn/root/usr/share/rpcd/acl.d/luci-app-openvpn.json
index bc9d8e184da456d14077a842410741ea948610dc..41f62ad2948c8dcefd57b0ef1acd4dd57e5a1d36 100644 (file)
--- a/applications/luci-app-openvpn/root/usr/share/rpcd/acl.d/luci-app-openvpn.json
+++ b/applications/luci-app-openvpn/root/usr/share/rpcd/acl.d/luci-app-openvpn.json
@@ -1,11 +1,15 @@
 {
        "luci-app-openvpn": {
-               "description": "Grant file upload access to /etc/openvpn",
+               "description": "Grant access to OpenVPN configuration",
+               "read": {
+                       "uci": [ "openvpn" ]
+               },
                "write": {
                        "cgi-io": [ "upload" ],
                        "file": {
                                "/etc/openvpn/*": [ "write" ]
-                       }
+                       },
+                       "uci": [ "openvpn" ]
                }
        }
 }