diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-03-26 15:17:34 +0100 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-04-09 17:14:29 +0200 |
| commit | 49e45f28a2b4a3b2c02bff32c24d9ffb8ef7dfc0 (patch) | |
| tree | f746c882356b7cbf89912a3c16aeae27ecb29543 | |
| parent | 7786ff694b098f44574f92b3bbf89db48438a20f (diff) | |
| download | freeipa-49e45f28a2b4a3b2c02bff32c24d9ffb8ef7dfc0.tar.gz freeipa-49e45f28a2b4a3b2c02bff32c24d9ffb8ef7dfc0.tar.xz freeipa-49e45f28a2b4a3b2c02bff32c24d9ffb8ef7dfc0.zip | |
Add managed read permissions to group
Part of the work for: https://fedorahosted.org/freeipa/ticket/3566
Reviewed-By: Martin Kosek <mkosek@redhat.com>
| -rw-r--r-- | ipalib/plugins/group.py | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/ipalib/plugins/group.py b/ipalib/plugins/group.py index 318f0746a..644954d94 100644 --- a/ipalib/plugins/group.py +++ b/ipalib/plugins/group.py @@ -137,6 +137,26 @@ class group(LDAPObject): 'sudorule'], } rdn_is_primary_key = True + managed_permissions = { + 'System: Read Groups': { + 'replaces_global_anonymous_aci': True, + 'ipapermbindruletype': 'anonymous', + 'ipapermright': {'read', 'search', 'compare'}, + 'ipapermdefaultattr': { + 'businesscategory', 'cn', 'description', 'gidnumber', + 'ipaexternalmember', 'ipauniqueid', 'mepmanagedby', 'o', + 'objectclass', 'ou', 'owner', 'seealso', + }, + }, + 'System: Read Group Membership': { + 'replaces_global_anonymous_aci': True, + 'ipapermbindruletype': 'all', + 'ipapermright': {'read', 'search', 'compare'}, + 'ipapermdefaultattr': { + 'member', 'memberof', 'memberuid', + }, + }, + } label = _('User Groups') label_singular = _('User Group') |