CA-41171: anyone should be able to access http/get_host_rrd

otherwise historical performance data of hosts is only available to pool* subjects.

Signed-off-by: Marcus Granado <marcus.granado@eu.citrix.com>

diff --git a/ocaml/idl/datamodel.ml b/ocaml/idl/datamodel.ml
index 821df7356c1b6b311b8e67e233bde079f35e381a..de2c16d8667de19f783255f63bfa7249ac59f4f6 100644 (file)
--- a/ocaml/idl/datamodel.ml
+++ b/ocaml/idl/datamodel.ml
@@ -6146,7 +6146,7 @@ let http_actions = [
                         [String_query_arg "entries"; String_query_arg "output"], _R_POOL_OP, []));
   ("get_vm_rrd", (Get, Constants.vm_rrd_uri, true, [String_query_arg "uuid"], _R_READ_ONLY, []));
   ("put_rrd", (Put, Constants.rrd_put_uri, false, [], _R_POOL_ADMIN, []));
-  ("get_host_rrd", (Get, Constants.host_rrd_uri, true, [Bool_query_arg "json"], _R_POOL_OP, []));
+  ("get_host_rrd", (Get, Constants.host_rrd_uri, true, [Bool_query_arg "json"], _R_READ_ONLY, []));
   ("get_rrd_updates", (Get, Constants.rrd_updates, true,
                       [Int64_query_arg "start"; String_query_arg "cf"; Int64_query_arg "interval";
                        Bool_query_arg "host"; String_query_arg "uuid"; Bool_query_arg "json"], _R_READ_ONLY, []));