tree 679df4a12a20ff2189e8d51e4792f8fd5fffa34b
parent 5344ab8e5bdb4fdced9041565fd745333a9a350e
author Abhishek Patel <Abhishek.Patel@ibm.com> 1627767891 -0500
committer Ed Tanous <edtanous@google.com> 1651074944 -0700

Fix Ethernet privileges

Post method:
  1) /redfish/v1/Managers/bmc/EthernetInterfaces/<str>/VLANs/
     ConfigureComponents -> ConfigureManager

Patch method:
  1) /redfish/v1/Managers/bmc/EthernetInterfaces/<str>/VLANs/<str>/
     ConfigureComponents -> ConfigureManager

  2) /redfish/v1/Managers/bmc/EthernetInterfaces/<str>/
     ConfigureComponents -> ConfigureManager (SubordinateOverrides)

Delete method:
  1) /redfish/v1/Managers/bmc/EthernetInterfaces/<str>/VLANs/<str>/
     ConfigureComponents -> ConfigureManager

This change allows only Admin user to post, patch, and delete on VLAN
Network Interface Collection and restrict Operator user.
Same for the EthernetInterfaces patch method.

Tested: Ran curl test with admin and operator privileged user for
        all methods (post, patch, and delete). one test failing.

Error: curl -k -H "X-Auth-Token: $bmc_token"  -X PATCH -d
       '{"VLANId" :30 , "VLANEnable" : true}'
       https://${BMC_IP}/redfish/v1/Managers/bmc/EthernetInterfaces/
       eth0/VLANs/eth0_50

       This command is unable to update the VLANId value. instead, it
       deletes VLAN

Email sent to openbmc list:
https://lists.ozlabs.org/pipermail/openbmc/2021-August/027232.html

Signed-off-by: Abhishek Patel <Abhishek.Patel@ibm.com>
Change-Id: I4101c429db6fa788909982b66445b191ccacaec7