webui: hide non-readable fields

hide widgets if associated field had received attribute level rights
without 'r' right.

Explicit rights are required to avoid hiding of special widgets which
are not associated with any LDAP attribute.

https://fedorahosted.org/freeipa/ticket/4402

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>

1 files changed, 13 insertions, 0 deletions

diff --git a/install/ui/src/freeipa/FieldBinder.js b/install/ui/src/freeipa/FieldBinder.js
index ed05d2531..7ee8e5874 100644
--- a/install/ui/src/freeipa/FieldBinder.js
+++ b/install/ui/src/freeipa/FieldBinder.js
@@ -121,6 +121,7 @@ define(['dojo/_base/declare',
             this.handle(field, 'require-change', this.on_field_require_change);
             this.handle(field, 'writable-change', this.on_field_writable_change);
             this.handle(field, 'readonly-change', this.on_field_readonly_change);
+            this.handle(field, 'acl-rights-change', this.on_field_acl_rights_change);
             this.handle(field, 'reset', this.on_field_reset);
 
             this.handle(widget, 'value-change', this.on_widget_value_change);
@@ -241,6 +242,18 @@ define(['dojo/_base/declare',
         },
 
         /**
+         * Field acl rights change handler
+         * @protected
+         */
+        on_field_acl_rights_change: function(event) {
+
+            var readable= event.rights.indexOf('r') > -1;
+            if (this.widget.set_readable) {
+                this.widget.set_readable(readable);
+            }
+        },
+
+        /**
          * Field reset handler
          *
          * @param {Object} event