diff --git a/src/api/vm.coffee b/src/api/vm.coffee
index 1ad7de22a..fc77f3097 100644
--- a/src/api/vm.coffee
+++ b/src/api/vm.coffee
@@ -673,6 +673,8 @@ exports.rollingSnapshot = rollingSnapshot
 backup = $coroutine ({vm, remoteId, file, compress, onlyMetadata}) ->
   yield @backupVm({vm, remoteId, file, compress, onlyMetadata})
 
+backup.permission = 'admin'
+
 backup.params = {
   id: {type: 'string'}
   remoteId: { type: 'string' }
@@ -723,6 +725,8 @@ rollingBackup = $coroutine ({vm, remoteId, tag, depth, compress, onlyMetadata})
     onlyMetadata
   })
 
+rollingBackup.permission = 'admin'
+
 rollingBackup.params = {
   id: { type: 'string' }
   remoteId: { type: 'string' }
@@ -945,6 +949,8 @@ import_ = $coroutine ({host, sr}) ->
     sr = xapi.pool.$default_SR
     if not sr
       throw new InvalidParameters('there is not default SR in this pool')
+
+    # FIXME: must have administrate permission on default SR.
   else
     xapi = @getXapi(sr)