[PR #220] feat: disable console/SSH for non-PAM or API Token users; add user guide and docs #301

New issue

Closed

opened 2026-03-07 19:57:30 +03:00 by kerem · 0 comments

kerem commented

2026-03-07 19:57:30 +03:00

Owner

Original Pull Request: https://github.com/Corsinvest/cv4pve-admin/pull/220

State: closed
Merged: Yes

Summary

Add IsPam property to WebApiCredential (true if username has no @ or ends with @pam, case-insensitive)
Disable node console buttons (NoVnc, Xterm.js) when WEB API user is not a PAM user
Disable VM/LXC console buttons when WEB API uses API Token authentication
Show PAM warning in SSH SameAsWebApi credential settings
Create user_guide.md with Command Palette documentation
Update admin-area.md with WEB API feature limitations table and SSH auth methods
Update resources.md with Console Limitations section
Add User Guide entry to mkdocs.yml

Test plan

Node console button disabled (tooltip shown) when cluster uses non-PAM user (e.g. user@pve)
Node console button enabled when cluster uses PAM user (e.g. root@pam or root)
VM/LXC console button disabled when cluster uses API Token authentication
VM/LXC console button enabled when cluster uses Credential authentication
SSH SameAsWebApi shows warning when WEB API user is not PAM
User Guide page renders correctly in MkDocs

**Original Pull Request:** https://github.com/Corsinvest/cv4pve-admin/pull/220 **State:** closed **Merged:** Yes --- ## Summary - Add `IsPam` property to `WebApiCredential` (true if username has no `@` or ends with `@pam`, case-insensitive) - Disable node console buttons (NoVnc, Xterm.js) when WEB API user is not a PAM user - Disable VM/LXC console buttons when WEB API uses API Token authentication - Show PAM warning in SSH `SameAsWebApi` credential settings - Create `user_guide.md` with Command Palette documentation - Update `admin-area.md` with WEB API feature limitations table and SSH auth methods - Update `resources.md` with Console Limitations section - Add User Guide entry to `mkdocs.yml` ## Test plan - [ ] Node console button disabled (tooltip shown) when cluster uses non-PAM user (e.g. `user@pve`) - [ ] Node console button enabled when cluster uses PAM user (e.g. `root@pam` or `root`) - [ ] VM/LXC console button disabled when cluster uses API Token authentication - [ ] VM/LXC console button enabled when cluster uses Credential authentication - [ ] SSH SameAsWebApi shows warning when WEB API user is not PAM - [ ] User Guide page renders correctly in MkDocs