remote: don't allow dirty rate API with read permission

This API interacts with the hypervisor and makes changes to its
behaviour, so must be protected by the write permission.

Reviewed-by: Ján Tomko <jtomko@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>

diff --git a/src/remote/remote_protocol.x b/src/remote/remote_protocol.x
index 7fdc65f02951dd22cd33f2d67f95ae816e9df634..743c21b3165a871393866629d3f1acb71fc7d6ab 100644 (file)
--- a/src/remote/remote_protocol.x
+++ b/src/remote/remote_protocol.x
@@ -6743,7 +6743,7 @@ enum remote_procedure {
 
     /**
      * @generate: both
-     * @acl: domain:read
+     * @acl: domain:write
      */
     REMOTE_PROC_DOMAIN_START_DIRTY_RATE_CALC = 427
 };