From 833b0904c418a6b32b5308f071a0b40f2aa2cbf4 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Tue, 12 Apr 2022 15:27:30 +0200
Subject: [PATCH] Service  / Unbound - ACL mismatch for overrides closes
 https://github.com/opnsense/core/issues/5704

---
 .../app/models/OPNsense/Unbound/ACL/ACL.xml   | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/src/opnsense/mvc/app/models/OPNsense/Unbound/ACL/ACL.xml b/src/opnsense/mvc/app/models/OPNsense/Unbound/ACL/ACL.xml
index df3c4a2c8..21e92392e 100644
--- a/src/opnsense/mvc/app/models/OPNsense/Unbound/ACL/ACL.xml
+++ b/src/opnsense/mvc/app/models/OPNsense/Unbound/ACL/ACL.xml
@@ -21,7 +21,24 @@
         <name>Services: Unbound DNS: Edit Host and Domain Override</name>
         <patterns>
             <pattern>ui/unbound/overrides/*</pattern>
-            <pattern>api/unbound/overrides/*</pattern>
+            <pattern>api/unbound/settings/searchHostOverride/*</pattern>
+            <pattern>api/unbound/settings/getHostOverride/*</pattern>
+            <pattern>api/unbound/settings/setHostOverride/*</pattern>
+            <pattern>api/unbound/settings/addHostOverride/*</pattern>
+            <pattern>api/unbound/settings/delHostOverride/*</pattern>
+            <pattern>api/unbound/settings/toggleHostOverride/*</pattern>
+            <pattern>api/unbound/settings/searchHostAlias/*</pattern>
+            <pattern>api/unbound/settings/getHostAlias/*</pattern>
+            <pattern>api/unbound/settings/setHostAlias/*</pattern>
+            <pattern>api/unbound/settings/addHostAlias/*</pattern>
+            <pattern>api/unbound/settings/delHostAlias/*</pattern>
+            <pattern>api/unbound/settings/toggleHostAlias/*</pattern>
+            <pattern>api/unbound/settings/searchDomainOverride/*</pattern>
+            <pattern>api/unbound/settings/getDomainOverride/*</pattern>
+            <pattern>api/unbound/settings/setDomainOverride/*</pattern>
+            <pattern>api/unbound/settings/addDomainOverride/*</pattern>
+            <pattern>api/unbound/settings/delDomainOverride/*</pattern>
+            <pattern>api/unbound/settings/toggleDomainOverride/*</pattern>
         </patterns>
     </page-services-dnsresolver-overrides>
     <page-diagnostics-logs-resolver>