%PDF- %PDF-
Direktori : /backups/router/usr/local/opnsense/mvc/app/models/OPNsense/Core/ACL/ |
Current File : //backups/router/usr/local/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml |
<acl> <user-config-readonly> <name>System: Deny config write</name> </user-config-readonly> <page-diagnostics-backup-restore> <name>Diagnostics: Backup / Restore</name> <patterns> <pattern>diag_backup.php*</pattern> </patterns> </page-diagnostics-backup-restore> <page-system-login-logout> <name>Lobby: Dashboard</name> <patterns> <pattern>index.php*</pattern> <pattern>ui/core/dashboard</pattern> <pattern>api/core/dashboard/*</pattern> <pattern>api/diagnostics/cpu_usage/*</pattern> <pattern>api/diagnostics/firewall/pf_states</pattern> <pattern>api/diagnostics/system/systemDisk</pattern> <pattern>api/diagnostics/system/systemInformation</pattern> <pattern>api/diagnostics/system/systemResources</pattern> <pattern>api/diagnostics/system/systemTemperature</pattern> <pattern>api/diagnostics/system/systemTime</pattern> <pattern>api/diagnostics/system/system_mbuf</pattern> <pattern>api/diagnostics/system/system_swap</pattern> </patterns> </page-system-login-logout> <page-all> <name>All pages</name> <patterns> <pattern>*</pattern> </patterns> </page-all> <page-diagnostics-crash-reporter> <name>System: Crash Reporter</name> <patterns> <pattern>crash_reporter.php*</pattern> </patterns> </page-diagnostics-crash-reporter> <page-system-status> <name>System: Status</name> <patterns> <pattern>api/core/system/status*</pattern> <pattern>api/core/system/dismissStatus</pattern> </patterns> </page-system-status> <page-diagnostics-authentication> <name>Diagnostics: Authentication</name> <patterns> <pattern>diag_authentication.php*</pattern> </patterns> </page-diagnostics-authentication> <page-diagnostics-configurationhistory> <name>Diagnostics: Configuration History</name> <patterns> <pattern>ui/core/backup/history*</pattern> <pattern>api/core/backup/*</pattern> </patterns> </page-diagnostics-configurationhistory> <page-diagnostics-factorydefaults> <name>Diagnostics: Factory defaults</name> <patterns> <pattern>diag_defaults.php*</pattern> </patterns> </page-diagnostics-factorydefaults> <page-diagnostics-haltsystem> <name>Diagnostics: Halt system</name> <patterns> <pattern>ui/core/halt</pattern> <pattern>api/core/system/halt</pattern> </patterns> </page-diagnostics-haltsystem> <page-diagnostics-limiter-info> <name>Diagnostics: Shaper status</name> <patterns> <pattern>ui/trafficshaper/service/statistics/*</pattern> <pattern>api/trafficshaper/service/statistics/*</pattern> </patterns> </page-diagnostics-limiter-info> <page-diagnostics-logs-dhcp> <name>Diagnostics: Logs: DHCP</name> <patterns> <pattern>ui/diagnostics/log/core/dhcpd/*</pattern> <pattern>api/diagnostics/log/core/dhcpd/*</pattern> </patterns> </page-diagnostics-logs-dhcp> <page-diagnostics-logs-gateways> <name>Diagnostics: Logs: Gateways</name> <patterns> <pattern>ui/diagnostics/log/core/gateways/*</pattern> <pattern>api/diagnostics/log/core/gateways/*</pattern> </patterns> </page-diagnostics-logs-gateways> <page-diagnostics-logs-system> <name>Diagnostics: Logs: System</name> <patterns> <pattern>ui/diagnostics/log/core/configd/*</pattern> <pattern>api/diagnostics/log/core/configd/*</pattern> <pattern>ui/diagnostics/log/core/system/*</pattern> <pattern>api/diagnostics/log/core/system/*</pattern> <pattern>ui/diagnostics/log/core/lighttpd/*</pattern> <pattern>api/diagnostics/log/core/lighttpd/*</pattern> </patterns> </page-diagnostics-logs-system> <page-diagnostics-packetcapture> <name>Diagnostics: Packet Capture</name> <patterns> <pattern>ui/diagnostics/packet_capture</pattern> <pattern>api/diagnostics/packet_capture/*</pattern> </patterns> </page-diagnostics-packetcapture> <page-diagnostics-tables> <name>Diagnostics: PF Table IP addresses</name> <patterns> <pattern>ui/firewall/alias_util/*</pattern> <pattern>api/firewall/alias_util/*</pattern> </patterns> </page-diagnostics-tables> <page-diagnostics-pf-info> <name>Diagnostics: Firewall statistics</name> <patterns> <pattern>ui/diagnostics/firewall/statistics</pattern> <pattern>api/diagnostics/firewall/pf_statistics/*</pattern> </patterns> </page-diagnostics-pf-info> <page-diagnostics-system-pftop> <name>Diagnostics: Firewall sessions</name> <patterns> <pattern>ui/diagnostics/firewall/pf_top*</pattern> <pattern>api/diagnostics/firewall/query_pf_top</pattern> <pattern>api/diagnostics/firewall/list_rule_ids</pattern> </patterns> </page-diagnostics-system-pftop> <page-diagnostics-ping> <name>Diagnostics: Ping</name> <patterns> <pattern>ui/diagnostics/ping</pattern> <pattern>api/diagnostics/ping/*</pattern> </patterns> </page-diagnostics-ping> <page-diagnostics-rebootsystem> <name>Diagnostics: Reboot System</name> <patterns> <pattern>ui/core/reboot</pattern> <pattern>api/core/system/reboot</pattern> </patterns> </page-diagnostics-rebootsystem> <page-diagnostics-showstates> <name>Diagnostics: Show States</name> <patterns> <pattern>ui/diagnostics/firewall/states*</pattern> <pattern>api/diagnostics/firewall/query_states*</pattern> <pattern>api/diagnostics/firewall/del_state*</pattern> <pattern>api/diagnostics/firewall/kill_states*</pattern> <pattern>api/diagnostics/firewall/flush_sources*</pattern> <pattern>api/diagnostics/firewall/flush_states*</pattern> </patterns> </page-diagnostics-showstates> <page-diagnostics-testport> <name>Diagnostics: Test Port</name> <patterns> <pattern>ui/diagnostics/portprobe*</pattern> <pattern>api/diagnostics/portprobe/*</pattern> </patterns> </page-diagnostics-testport> <page-diagnostics-dns_diagnostics> <name>Interfaces: Diagnostics: DNS Lookup</name> <patterns> <pattern>ui/diagnostics/dns_diagnostics</pattern> <pattern>api/diagnostics/dns_diagnostics/*</pattern> </patterns> </page-diagnostics-dns_diagnostics> <page-diagnostics-traceroute> <name>Diagnostics: Traceroute</name> <patterns> <pattern>ui/diagnostics/traceroute*</pattern> <pattern>api/diagnostics/traceroute/*</pattern> </patterns> </page-diagnostics-traceroute> <page-firewall-alias-edit> <name>Firewall: Alias: Edit</name> <patterns> <pattern>ui/firewall/alias/*</pattern> <pattern>api/firewall/alias/*</pattern> </patterns> </page-firewall-alias-edit> <page-firewall-aliases> <name>Firewall: Aliases</name> <patterns> <pattern>ui/firewall/alias/*</pattern> <pattern>api/firewall/alias/export</pattern> <pattern>api/firewall/alias/search*</pattern> <pattern>api/firewall/alias/list*</pattern> <pattern>api/firewall/alias/get*</pattern> </patterns> </page-firewall-aliases> <page-firewall-categories> <name>Firewall: Categories</name> <patterns> <pattern>ui/firewall/category/*</pattern> <pattern>api/firewall/category/*</pattern> </patterns> </page-firewall-categories> <page-firewall-nat-outbound> <name>Firewall: NAT: Outbound</name> <patterns> <pattern>firewall_nat_out.php*</pattern> <pattern>api/firewall/category/searchItem*</pattern> </patterns> </page-firewall-nat-outbound> <page-firewall-nat-outbound-edit> <name>Firewall: NAT: Outbound: Edit</name> <patterns> <pattern>firewall_nat_out_edit.php*</pattern> </patterns> </page-firewall-nat-outbound-edit> <page-firewall-nat-portforward> <name>Firewall: NAT: Port Forward</name> <patterns> <pattern>firewall_nat.php*</pattern> <pattern>api/firewall/category/searchItem*</pattern> </patterns> </page-firewall-nat-portforward> <page-firewall-nat-portforward-edit> <name>Firewall: NAT: Port Forward: Edit</name> <patterns> <pattern>firewall_nat_edit.php*</pattern> </patterns> </page-firewall-nat-portforward-edit> <page-firewall-rules> <name>Firewall: Rules</name> <patterns> <pattern>firewall_rules.php*</pattern> <pattern>api/firewall/category/searchItem*</pattern> <pattern>api/firewall/filter_util/rule_stats*</pattern> </patterns> </page-firewall-rules> <page-firewall-rules-edit> <name>Firewall: Rules: Edit</name> <patterns> <pattern>firewall_rules_edit.php*</pattern> </patterns> </page-firewall-rules-edit> <page-firewall-schedules> <name>Firewall: Schedules</name> <patterns> <pattern>firewall_schedule.php*</pattern> </patterns> </page-firewall-schedules> <page-firewall-scrub> <name>Firewall: Normalization</name> <patterns> <pattern>firewall_scrub.php*</pattern> <pattern>firewall_scrub_edit.php*</pattern> </patterns> </page-firewall-scrub> <page-firewall-schedules-edit> <name>Firewall: Schedules: Edit</name> <patterns> <pattern>firewall_schedule_edit.php*</pattern> </patterns> </page-firewall-schedules-edit> <page-diagnostics-logs-firewall-general> <name>Diagnostics: Log: Firewall: General</name> <patterns> <pattern>ui/diagnostics/log/core/firewall/*</pattern> <pattern>api/diagnostics/log/core/firewall/*</pattern> </patterns> </page-diagnostics-logs-firewall-general> <page-diagnostics-logs-firewall-plain> <name>Diagnostics: Logs: Firewall: Plain View</name> <patterns> <pattern>ui/diagnostics/log/core/filter/*</pattern> <pattern>api/diagnostics/log/core/filter/*</pattern> </patterns> </page-diagnostics-logs-firewall-plain> <page-diagnostics-logs-firewall-dynamic> <name>Diagnostics: Logs: Firewall: Live View</name> <patterns> <pattern>ui/diagnostics/firewall/log*</pattern> <pattern>api/diagnostics/firewall/streamLog</pattern> <pattern>api/diagnostics/firewall/log*</pattern> <pattern>api/diagnostics/interface/getInterfaceNames</pattern> <pattern>api/diagnostics/dns/reverse_lookup*</pattern> <pattern>api/diagnostics/lvtemplate/*</pattern> </patterns> </page-diagnostics-logs-firewall-dynamic> <page-diagnostics-logs-firewall-summary> <name>Diagnostics: Logs: Firewall: Summary View</name> <patterns> <pattern>ui/diagnostics/firewall/stats*</pattern> <pattern>api/diagnostics/firewall/stats*</pattern> </patterns> </page-diagnostics-logs-firewall-summary> <page-interfaces-assignnetworkports> <name>Interfaces: Assign network ports</name> <patterns> <pattern>interfaces_assign.php*</pattern> </patterns> </page-interfaces-assignnetworkports> <page-interfaces-bridge-edit> <name>Interfaces: Bridge edit</name> <patterns> <pattern>interfaces_bridge_edit.php*</pattern> </patterns> </page-interfaces-bridge-edit> <page-interfaces-bridge> <name>Interfaces: Bridge</name> <patterns> <pattern>interfaces_bridge.php*</pattern> </patterns> </page-interfaces-bridge> <page-interfaces-gif-edit> <name>Interfaces: GIF</name> <patterns> <pattern>ui/interfaces/gif</pattern> <pattern>ui/interfaces/gif_settings/*</pattern> </patterns> </page-interfaces-gif-edit> <page-interfaces-gre-edit> <name>Interfaces: GRE</name> <patterns> <pattern>ui/interfaces/gre</pattern> <pattern>ui/interfaces/gre_settings/*</pattern> </patterns> </page-interfaces-gre-edit> <page-interfaces-groups-edit> <name>Interfaces: Groups: Edit</name> <patterns> <pattern>ui/firewall/group</pattern> <pattern>api/firewall/group/*</pattern> </patterns> </page-interfaces-groups-edit> <page-interfaces-ppps> <name>Interfaces: PPPs</name> <patterns> <pattern>interfaces_ppps.php*</pattern> </patterns> </page-interfaces-ppps> <page-interfaces-ppps-edit> <name>Interfaces: PPPs: Edit</name> <patterns> <pattern>interfaces_ppps_edit.php*</pattern> <pattern>getserviceproviders.php*</pattern> </patterns> </page-interfaces-ppps-edit> <page-interfaces> <name>Interfaces: WAN</name> <patterns> <pattern>interfaces.php*</pattern> </patterns> </page-interfaces> <page-interfaces-wireless-edit> <name>Interfaces: Wireless edit</name> <patterns> <pattern>interfaces_wireless_edit.php*</pattern> </patterns> </page-interfaces-wireless-edit> <page-interfaces-wireless> <name>Interfaces: Wireless</name> <patterns> <pattern>interfaces_wireless.php*</pattern> </patterns> </page-interfaces-wireless> <page-wizard-system> <name>System Setup Wizard</name> <patterns> <pattern>wizard.php?xml=system</pattern> </patterns> </page-wizard-system> <page-services-dhcpserver-editstaticmapping> <name>Services: DHCP Server: Edit static mapping</name> <patterns> <pattern>services_dhcp_edit.php*</pattern> </patterns> </page-services-dhcpserver-editstaticmapping> <page-services-dhcpserver> <name>Services: DHCP server</name> <patterns> <pattern>services_dhcp.php*</pattern> </patterns> </page-services-dhcpserver> <page-services-dhcpserverv6-editstaticmapping> <name>Services: DHCPv6 Server: Edit static mapping</name> <patterns> <pattern>services_dhcpv6_edit.php*</pattern> </patterns> </page-services-dhcpserverv6-editstaticmapping> <page-services-dhcpv6server> <name>Services: DHCPv6 server</name> <patterns> <pattern>services_dhcpv6.php*</pattern> </patterns> </page-services-dhcpv6server> <page-services-opendns> <name>Services: DNS Filter</name> <patterns> <pattern>services_opendns.php*</pattern> </patterns> </page-services-opendns> <page-services-router-advertisements> <name>Services: Router advertisements</name> <patterns> <pattern>services_router_advertisements.php*</pattern> </patterns> </page-services-router-advertisements> <page-status-habackup> <name>Status: HA backup</name> <patterns> <pattern>ui/core/hasync_status</pattern> <pattern>api/core/hasync_status/*</pattern> </patterns> </page-status-habackup> <page-status-dhcpleases> <name>Status: DHCP leases</name> <patterns> <pattern>ui/dhcpv4/leases</pattern> <pattern>api/dhcpv4/leases/*</pattern> </patterns> </page-status-dhcpleases> <page-status-dhcpv6leases> <name>Status: DHCPv6 leases</name> <patterns> <pattern>ui/dhcpv6/leases</pattern> <pattern>api/dhcpv6/leases/*</pattern> </patterns> </page-status-dhcpv6leases> <page-status-interfaces> <name>Status: Interfaces</name> <patterns> <pattern>ui/interfaces/overview</pattern> <pattern>api/interfaces/overview/*</pattern> </patterns> </page-status-interfaces> <page-status-openvpn> <name>Status: OpenVPN</name> <patterns> <pattern>ui/openvpn/status</pattern> <pattern>api/openvpn/service/*</pattern> </patterns> </page-status-openvpn> <page-status-services> <name>Status: Services</name> <patterns> <pattern>ui/core/service</pattern> <pattern>api/core/service/*</pattern> </patterns> </page-status-services> <page-status-systemlogs-portalauth> <name>Status: System logs: Captive portal</name> <patterns> <pattern>ui/diagnostics/log/core/portalauth/*</pattern> <pattern>api/diagnostics/log/core/portalauth/*</pattern> </patterns> </page-status-systemlogs-portalauth> <page-status-systemlogs-ppp> <name>Status: System logs: PPP</name> <patterns> <pattern>ui/diagnostics/log/core/ppp/*</pattern> <pattern>api/diagnostics/log/core/ppp/*</pattern> </patterns> </page-status-systemlogs-ppp> <page-status-systemlogs-openvpn> <name>Status: System logs: OpenVPN</name> <patterns> <pattern>ui/diagnostics/log/core/openvpn/*</pattern> <pattern>api/diagnostics/log/core/openvpn/*</pattern> </patterns> </page-status-systemlogs-openvpn> <page-status-systemlogs-routing> <name>Status: System logs: Routing</name> <patterns> <pattern>ui/diagnostics/log/core/routing/*</pattern> <pattern>api/diagnostics/log/core/routing/*</pattern> </patterns> </page-status-systemlogs-routing> <page-status-systemlogs-wireless> <name>Status: System logs: Wireless</name> <patterns> <pattern>ui/diagnostics/log/core/wireless/*</pattern> <pattern>api/diagnostics/log/core/wireless/*</pattern> </patterns> </page-status-systemlogs-wireless> <page-status-trafficgraph> <name>Reporting: Traffic</name> <patterns> <pattern>ui/diagnostics/traffic</pattern> <pattern>api/diagnostics/traffic/*</pattern> </patterns> </page-status-trafficgraph> <page-status-dnsoverview> <name>Status: DNS Overview</name> <patterns> <pattern>ui/unbound/overview*</pattern> <pattern>api/unbound/overview*</pattern> </patterns> </page-status-dnsoverview> <page-diagnostics-wirelessstatus> <name>Status: Wireless</name> <patterns> <pattern>status_wireless.php*</pattern> </patterns> </page-diagnostics-wirelessstatus> <page-system-advanced-admin> <name>System: Advanced: Admin Access Page</name> <patterns> <pattern>system_advanced_admin.php*</pattern> </patterns> </page-system-advanced-admin> <page-system-advanced-firewall> <name>System: Advanced: Firewall and NAT</name> <patterns> <pattern>system_advanced_firewall.php*</pattern> </patterns> </page-system-advanced-firewall> <page-system-advanced-misc> <name>System: Advanced: Miscellaneous</name> <patterns> <pattern>system_advanced_misc.php*</pattern> </patterns> </page-system-advanced-misc> <page-system-advanced-network> <name>System: Advanced: Network</name> <patterns> <pattern>system_advanced_network.php*</pattern> </patterns> </page-system-advanced-network> <page-system-advanced-sysctl> <name>System: Advanced: Tunables</name> <patterns> <pattern>ui/core/tunables</pattern> <pattern>api/core/tunables/*</pattern> </patterns> </page-system-advanced-sysctl> <page-system-authservers> <name>System: Authentication Servers</name> <patterns> <pattern>system_authservers.php*</pattern> <pattern>system_usermanager_settings_ldapacpicker.php*</pattern> </patterns> </page-system-authservers> <page-system-camanager> <name>System: CA Manager</name> <patterns> <pattern>ui/trust/ca</pattern> <pattern>api/trust/ca/*</pattern> </patterns> </page-system-camanager> <page-system-certmanager> <name>System: Certificate Manager</name> <patterns> <pattern>ui/trust/cert</pattern> <pattern>api/trust/cert/*</pattern> </patterns> </page-system-certmanager> <page-system-crlmanager> <name>System: CRL Manager</name> <patterns> <pattern>ui/trust/crl</pattern> <pattern>api/trust/crl/*</pattern> </patterns> </page-system-crlmanager> <page-snapshots> <name>System: Snapshots</name> <patterns> <pattern>ui/core/snapshots</pattern> <pattern>api/core/snapshots/*</pattern> </patterns> </page-snapshots> <page-system-firmware-manualupdate> <name>System: Firmware</name> <patterns> <pattern>ui/core/firmware/*</pattern> <pattern>api/core/firmware/*</pattern> <pattern>ui/diagnostics/log/core/pkg/*</pattern> <pattern>api/diagnostics/log/core/pkg/*</pattern> </patterns> </page-system-firmware-manualupdate> <page-system-gateways> <name>System: Gateways</name> <patterns> <pattern>ui/routing/configuration</pattern> <pattern>api/routing/settings/*</pattern> <pattern>api/routes/gateway/status</pattern> </patterns> </page-system-gateways> <page-system-gatewaygroups> <name>System: Gateway Groups</name> <patterns> <pattern>system_gateway_groups.php*</pattern> </patterns> </page-system-gatewaygroups> <page-system-gateways-editgatewaygroups> <name>System: Gateways: Edit Gateway Groups</name> <patterns> <pattern>system_gateway_groups_edit.php*</pattern> </patterns> </page-system-gateways-editgatewaygroups> <page-system-generalsetup> <name>System: General Setup</name> <patterns> <pattern>system_general.php*</pattern> </patterns> </page-system-generalsetup> <page-system-groupmanager> <name>System: Access: Groups</name> <patterns> <pattern>ui/auth/group</pattern> <pattern>api/auth/group/*</pattern> </patterns> </page-system-groupmanager> <page-system-hasync> <name>System: High Availability</name> <patterns> <pattern>ui/core/hasync</pattern> <pattern>api/core/hasync/*</pattern> </patterns> </page-system-hasync> <page-system-license> <name>Lobby: License</name> <patterns> <pattern>ui/core/license</pattern> </patterns> </page-system-license> <page-system-staticroutes> <name>System: Static Routes</name> <patterns> <pattern>ui/routes/*</pattern> <pattern>api/routes/*</pattern> </patterns> </page-system-staticroutes> <page-system-usermanager> <name>System: Access: Users</name> <patterns> <pattern>ui/auth/user</pattern> <pattern>api/auth/user/*</pattern> </patterns> </page-system-usermanager> <page-system-usermanager-addprivs> <name>System: Access: Privileges</name> <patterns> <pattern>ui/auth/priv</pattern> <pattern>api/auth/priv/*</pattern> </patterns> </page-system-usermanager-addprivs> <page-system-usermanager-passwordmg> <name>Lobby: Password</name> <patterns> <pattern>system_usermanager_passwordmg.php*</pattern> </patterns> </page-system-usermanager-passwordmg> <page-openvpn-client-export> <name>VPN: OpenVPN: Client Export Utility</name> <patterns> <pattern>ui/openvpn/export/*</pattern> <pattern>api/openvpn/export/*</pattern> </patterns> </page-openvpn-client-export> <page-openvpn-client> <name>VPN: OpenVPN: Client</name> <patterns> <pattern>vpn_openvpn_client.php*</pattern> </patterns> </page-openvpn-client> <page-openvpn-csc> <name>VPN: OpenVPN: Client Specific Override</name> <patterns> <pattern>ui/openvpn/client_overwrites</pattern> <pattern>api/openvpn/client_overwrites/*</pattern> </patterns> </page-openvpn-csc> <page-openvpn-instances> <name>VPN: OpenVPN: Instances</name> <patterns> <pattern>ui/openvpn/instances</pattern> <pattern>api/openvpn/instances/*</pattern> </patterns> </page-openvpn-instances> <page-openvpn-server> <name>VPN: OpenVPN: Server</name> <patterns> <pattern>vpn_openvpn_server.php*</pattern> <pattern>wizard.php?xml=openvpn&*</pattern> </patterns> </page-openvpn-server> <page-xmlrpclibrary> <name>XMLRPC Library</name> <patterns> <pattern>xmlrpc.php*</pattern> </patterns> </page-xmlrpclibrary> </acl>