freeipa.git/tests/test_xmlrpc/test_permission_plugin.py, branch hbactester FreeIPA project Permission rename test failing 2011-02-01T20:43:12+00:00 Martin Kosek mkosek@redhat.com 2011-02-01T11:31:54+00:00 685c516e884ead09c7ba7f435e7a63123721833c This patch fixes test for Permission plugin - mainly permission-mod part. Description field that the tests expected and which was removed in ticket 792 was removed from the tests. https://fedorahosted.org/freeipa/ticket/892 
This patch fixes test for Permission plugin - mainly permission-mod
part. Description field that the tests expected and which was
removed in ticket 792 was removed from the tests.

https://fedorahosted.org/freeipa/ticket/892
Rename permissions and privileges to be more readable. 2011-01-31T18:17:38+00:00 Rob Crittenden rcritten@redhat.com 2011-01-31T16:01:56+00:00 bf4f77d98590c049842715f51968d1e7e2ac9516 This also drops description from permissions since it seems redundant and fixes up the help text a little. ticket 792 
This also drops description from permissions since it seems redundant and
fixes up the help text a little.

ticket 792
ipa permission-mod --rename does not work 2011-01-29T04:51:09+00:00 Martin Kosek mkosek@redhat.com 2011-01-27T11:17:10+00:00 f72d8e506a82dc558f89a4d115f3aad261655ba8 This patch fixes nonfunctional rename operation in permission plugin. Also makes sure, that no change is made to the underlying ACI in pre_callback() when the target permission already exists. Several tests for the rename operation have been created to ensure that the it won't break again unnoticed. https://fedorahosted.org/freeipa/ticket/814 
This patch fixes nonfunctional rename operation in permission
plugin. Also makes sure, that no change is made to the underlying
ACI in pre_callback() when the target permission already exists.

Several tests for the rename operation have been created to ensure
that the it won't break again unnoticed.

https://fedorahosted.org/freeipa/ticket/814
Display the entries that failed when deleting with --continue. 2011-01-10T15:32:10+00:00 Rob Crittenden rcritten@redhat.com 2011-01-07T16:17:55+00:00 6f58f38748085e6a104de6f9e992469d3b685d5a We collected the failures but didn't report it back. This changes the API of most delete commands so rather than returning a boolean it returns a dict with the only current key as failed. This also adds a new parameter flag, suppress_empty. This will try to not print values that are empty if included. This makes the output of the delete commands a bit prettier. ticket 687 
We collected the failures but didn't report it back. This changes the
API of most delete commands so rather than returning a boolean it returns
a dict with the only current key as failed.

This also adds a new parameter flag, suppress_empty. This will try to
not print values that are empty if included. This makes the output of
the delete commands a bit prettier.

ticket 687
Change FreeIPA license to GPLv3+ 2010-12-20T22:19:53+00:00 Jakub Hrozek jhrozek@redhat.com 2010-12-09T12:59:11+00:00 7493d781dfcaa7995f7864a09ad39ba6a89f1a9c The changes include: * Change license blobs in source files to mention GPLv3+ not GPLv2 only * Add GPLv3+ license text * Package COPYING not LICENSE as the license blobs (even the old ones) mention COPYING specifically, it is also more common, I think https://fedorahosted.org/freeipa/ticket/239 
The changes include:
 * Change license blobs in source files to mention GPLv3+ not GPLv2 only
 * Add GPLv3+ license text
 * Package COPYING not LICENSE as the license blobs (even the old ones)
   mention COPYING specifically, it is also more common, I think

 https://fedorahosted.org/freeipa/ticket/239
Re-implement access control using an updated model. 2010-12-02T01:42:31+00:00 Rob Crittenden rcritten@redhat.com 2010-12-01T16:23:52+00:00 4ad8055341b9f12c833abdf757755ed95f1b375e The new model is based on permssions, privileges and roles. Most importantly it corrects the reverse membership that caused problems in the previous implementation. You add permission to privileges and privileges to roles, not the other way around (even though it works that way behind the scenes). A permission object is a combination of a simple group and an aci. The linkage between the aci and the permission is the description of the permission. This shows as the name/description of the aci. ldap:///self and groups granting groups (v1-style) are not supported by this model (it will be provided separately). This makes the aci plugin internal only. ticket 445 
The new model is based on permssions, privileges and roles.
Most importantly it corrects the reverse membership that caused problems
in the previous implementation. You add permission to privileges and
privileges to roles, not the other way around (even though it works that
way behind the scenes).

A permission object is a combination of a simple group and an aci.
The linkage between the aci and the permission is the description of
the permission. This shows as the name/description of the aci.

ldap:///self and groups granting groups (v1-style) are not supported by
this model (it will be provided separately).

This makes the aci plugin internal only.

ticket 445