Merge pull request #708 from stgraber/project

incusd/project: Allow managed volumes under "allow"
lxc · Mar 30, 2024 · 0d3c5a6 · 0d3c5a6
2 parents 18a13cd + 54bb8dd
commit 0d3c5a6
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/internal/server/project/permissions.go b/internal/server/project/permissions.go
@@ -623,10 +623,11 @@ func checkRestrictions(project api.Project, instances []api.Instance, profiles [
 					}
 
 				case "allow":
-					var allowed bool
-					allowed, _ = CheckRestrictedDevicesDiskPaths(project.Config, device["source"])
-					if !allowed {
-						return fmt.Errorf("Disk source path %q not allowed", device["source"])
+					if device["pool"] == "" {
+						allowed, _ := CheckRestrictedDevicesDiskPaths(project.Config, device["source"])
+						if !allowed {
+							return fmt.Errorf("Disk source path %q not allowed", device["source"])
+						}
 					}
 				}