Change vm args using api + api token authorization schema

[dmitrynovice]

Hello.

I am trying to set vm vnc port using api.

Previously when I was performing this using "PVEAuthCookie authorization schema" everything worked fine.
Now I am trying to switch my script to "PVEAPIToken schema".

Problem is that my request does not change args and return '{"data":null}'.

Request:

curl -X POST -k -d 'args=-vnc 0.0.0.0:3333' https://192.168.1.222:8006/api2/json/nodes/test/qemu/122/config -H 'Authorization: PVEAPIToken=root@pam!api_token=9d6824c0-a1c9-453e-8524-9ce179120c3e'

Is that functionality restricted for some reason or am I doing anything wrong?
Thank you for help in advance!

Spoiler

proxmox-ve: 7.3-1 (running kernel: 5.15.74-1-pve)
pve-manager: 7.3-3 (running version: 7.3-3/c3928077)
pve-kernel-5.15: 7.2-14
pve-kernel-helper: 7.2-14
pve-kernel-5.4: 6.4-20
pve-kernel-5.15.74-1-pve: 5.15.74-1
pve-kernel-5.4.203-1-pve: 5.4.203-1
pve-kernel-5.4.34-1-pve: 5.4.34-2
ceph-fuse: 14.2.21-1
corosync: 3.1.7-pve1
criu: 3.15-1+pve-1
glusterfs-client: 9.2-1
ifupdown: 0.8.36+pve2
ksm-control-daemon: 1.4-1
libjs-extjs: 7.0.0-1
libknet1: 1.24-pve2
libproxmox-acme-perl: 1.4.2
libproxmox-backup-qemu0: 1.3.1-1
libpve-access-control: 7.2-5
libpve-apiclient-perl: 3.2-1
libpve-common-perl: 7.3-1
libpve-guest-common-perl: 4.2-3
libpve-http-server-perl: 4.1-5
libpve-storage-perl: 7.3-1
libqb0: 1.0.5-1
libspice-server1: 0.14.3-2.1
lvm2: 2.03.11-2.1
lxc-pve: 5.0.0-3
lxcfs: 4.0.12-pve1
novnc-pve: 1.3.0-3
proxmox-backup-client: 2.3.1-1
proxmox-backup-file-restore: 2.3.1-1
proxmox-mini-journalreader: 1.3-1
proxmox-offline-mirror-helper: 0.5.0-1
proxmox-widget-toolkit: 3.5.3
pve-cluster: 7.3-1
pve-container: 4.4-2
pve-docs: 7.3-1
pve-edk2-firmware: 3.20220526-1
pve-firewall: 4.2-7
pve-firmware: 3.5-6
pve-ha-manager: 3.5.1
pve-i18n: 2.8-1
pve-qemu-kvm: 7.1.0-4
pve-xtermjs: 4.16.0-1
qemu-server: 7.3-1
smartmontools: 7.2-pve3
spiceterm: 3.2-2
swtpm: 0.8.0~bpo11+2
vncterm: 1.7-1
zfsutils-linux: 2.1.6-pve1

*Privilege separation is disabled

 

[fweber]

Hi, the HTTP response status code might give some more information about what went wrong. You can ask curl to print it with the -i option.

 

[fabian]

yes, setting "args" is limited to the root@pam *user*.

 

[dmitrynovice]

Thank you for this information!

Is there any way to remove this restriction?

Proxmox codebase is quite large. Can you please point to what direction (in source code) I need to dig in order to change this behavior?

 

[fabian]

no, there isn't at the moment.