summaryrefslogtreecommitdiffstats
path: root/ACI.txt
diff options
context:
space:
mode:
authorTomas Babej <tbabej@redhat.com>2014-09-17 13:04:49 +0200
committerTomas Babej <tbabej@redhat.com>2014-09-22 12:00:06 +0200
commit0632c5fe5859e272e6a02984935a487eaace64f6 (patch)
tree34b66801fe9cc9544ff2905dc3515201051cc164 /ACI.txt
parent95deccd7a8b1f2129f6987a5a3a9e6ed57168442 (diff)
downloadfreeipa-0632c5fe5859e272e6a02984935a487eaace64f6.tar.gz
freeipa-0632c5fe5859e272e6a02984935a487eaace64f6.tar.xz
freeipa-0632c5fe5859e272e6a02984935a487eaace64f6.zip
idviews: Add ipaOriginalUid
Diffstat (limited to 'ACI.txt')
-rw-r--r--ACI.txt2
1 files changed, 1 insertions, 1 deletions
diff --git a/ACI.txt b/ACI.txt
index 30ca95a09..81f7b6a7c 100644
--- a/ACI.txt
+++ b/ACI.txt
@@ -121,7 +121,7 @@ aci: (targetfilter = "(objectclass=ipahostgroup)")(version 3.0;acl "permission:S
dn: cn=views,cn=accounts,dc=ipa,dc=example
aci: (targetattr = "cn || createtimestamp || description || entryusn || gidnumber || ipaanchoruuid || modifytimestamp || objectclass")(targetfilter = "(|(objectclass=ipaGroupOverride)(objectclass=ipaOverrideAnchor))")(version 3.0;acl "permission:System: Read Group ID Overrides";allow (compare,read,search) userdn = "ldap:///all";)
dn: cn=views,cn=accounts,dc=ipa,dc=example
-aci: (targetattr = "createtimestamp || description || entryusn || homedirectory || ipaanchoruuid || modifytimestamp || objectclass || uid || uidnumber")(targetfilter = "(|(objectclass=ipaOverrideAnchor)(objectclass=ipaUserOverride))")(version 3.0;acl "permission:System: Read User ID Overrides";allow (compare,read,search) userdn = "ldap:///all";)
+aci: (targetattr = "createtimestamp || description || entryusn || homedirectory || ipaanchoruuid || ipaoriginaluid || modifytimestamp || objectclass || uid || uidnumber")(targetfilter = "(|(objectclass=ipaOverrideAnchor)(objectclass=ipaUserOverride))")(version 3.0;acl "permission:System: Read User ID Overrides";allow (compare,read,search) userdn = "ldap:///all";)
dn: cn=ranges,cn=etc,dc=ipa,dc=example
aci: (targetattr = "cn || createtimestamp || entryusn || ipabaseid || ipabaserid || ipaidrangesize || ipanttrusteddomainsid || iparangetype || ipasecondarybaserid || modifytimestamp || objectclass")(targetfilter = "(objectclass=ipaidrange)")(version 3.0;acl "permission:System: Read ID Ranges";allow (compare,read,search) userdn = "ldap:///all";)
dn: cn=views,cn=accounts,dc=ipa,dc=example