icinga2/lib/remote/apiuser.hpp
Julian Brost 324d5bb815 Add filter-expression permission
This allows preventing ApiUsers from evaluating their own DSL expressions for
improved security.
2026-06-23 10:55:45 +02:00

30 lines
599 B
C++

// SPDX-FileCopyrightText: 2012 Icinga GmbH <https://icinga.com>
// SPDX-License-Identifier: GPL-2.0-or-later
#ifndef APIUSER_H
#define APIUSER_H
#include "remote/i2-remote.hpp"
#include "remote/apiuser-ti.hpp"
namespace icinga
{
/**
* @ingroup remote
*/
class ApiUser final : public ObjectImpl<ApiUser>
{
public:
DECLARE_OBJECT(ApiUser);
DECLARE_OBJECTNAME(ApiUser);
static ApiUser::Ptr GetByClientCN(const String& cn);
static ApiUser::Ptr GetByAuthHeader(const String& auth_header);
static inline const String FilterExpressionPerm = "filter-expression";
};
}
#endif /* APIUSER_H */