freeipa.git/tests/test_xmlrpc/test_hbac_plugin.py, branch hbactester

Hide the HBAC access type attribute now that deny is deprecated.

2011-07-21T05:11:45+00:00

It won't appear in the UI/CLI but is still available via XML-RPC.
allow is the default and deny will be rejected.

https://fedorahosted.org/freeipa/ticket/1495

Fix failing tests due to object name changes

2011-07-18T02:21:53+00:00

Some object names had spaces in them which was bad, update the tests
to reflect the new names.

Remove the ability to create new HBAC deny rules.

2011-07-14T23:23:17+00:00

New rules will all be allow type. Existing rules cannot be changed to
deny.

The type attribute now defaults to allow with autofill so it won't be
prompted in interactive mode in the cli.

https://fedorahosted.org/freeipa/ticket/1432

Add sudorule and hbacrule to memberof and indirectmemberof attributes

2011-06-06T17:14:38+00:00

Add Add tests for users, groups, hosts and hostgroups to verify membership

Update API to version 2.3

https://fedorahosted.org/freeipa/ticket/1170

Display the entries that failed when deleting with --continue.

2011-01-10T15:32:10+00:00

We collected the failures but didn't report it back. This changes the
API of most delete commands so rather than returning a boolean it returns
a dict with the only current key as failed.

This also adds a new parameter flag, suppress_empty. This will try to
not print values that are empty if included. This makes the output of
the delete commands a bit prettier.

ticket 687

Rename hbac module to hbacrule

2011-01-07T14:42:34+00:00

The renaming follows previous discussion on mailing list and it leads to
name compatibility with other plugins (e.g. sudorule). It is also
necessary for following changes in ipa help.

Change FreeIPA license to GPLv3+

2010-12-20T22:19:53+00:00

The changes include:
 * Change license blobs in source files to mention GPLv3+ not GPLv2 only
 * Add GPLv3+ license text
 * Package COPYING not LICENSE as the license blobs (even the old ones)
   mention COPYING specifically, it is also more common, I think

 https://fedorahosted.org/freeipa/ticket/239

Remove accessTime from HBAC.

2010-12-06T16:42:13+00:00

ticket 545

Populate indirect members when showing a group object.

2010-10-28T19:15:52+00:00

This is done by creating a new attribute, memberindirect, to hold this
indirect membership.

The new function get_members() can return all members or just indirect or
direct. We are only using it to retrieve indirect members currently.

This also:
* Moves all member display attributes into baseldap.py to reduce duplication
* Adds netgroup nesting
* Use a unique object name in hbacsvc and hbacsvcgroup

ticket 296

If an HBAC category is 'all' don't allow individual objects to be added.

2010-10-08T14:11:41+00:00

Basically, make 'all' mutually exclusive. This makes debugging lots easier.
If say usercat='all' there is no point adding specific users to the rule
because it will always apply to everyone.

ticket 164