Fixed permission reset and is_dirty.

The reset and is_dirty functionality for permission has been fixed.
New widgets have been created for select and a collection of checkboxes.
New test data files have been added for each target type.

6 files changed, 200 insertions, 841 deletions

diff --git a/install/ui/test/data/permission_find.json b/install/ui/test/data/permission_find.json
index cad5f0868..9308a809c 100644
--- a/install/ui/test/data/permission_find.json
+++ b/install/ui/test/data/permission_find.json
@@ -2,412 +2,58 @@
     "error": null,
     "id": 0,
     "result": {
-        "count": 47,
+        "count": 4,
         "result": [
             {
                 "cn": [
-                    "addusers"
+                    "filter"
                 ],
                 "description": [
-                    "Add Users"
+                    "Filter Permission"
                 ],
-                "dn": "cn=addusers,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "useradmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "type": "user"
-            },
-            {
-                "attrs": [
-                    "userPassword",
-                    "krbPrincipalKey",
-                    "sambaLMPassword",
-                    "sambaNTPassword",
-                    "passwordHistory"
-                ],
-                "cn": [
-                    "change_password"
-                ],
-                "description": [
-                    "Change a user password"
-                ],
-                "dn": "cn=change_password,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "useradmin"
+                "dn": "cn=filter,cn=permissions,cn=pbac,dc=ipa",
+                "filter": "(ou=Engineering)",
+                "objectclass": [
+                    "groupofnames",
+                    "top"
                 ],
                 "permissions": [
                     "write"
                 ]
             },
             {
-                "attrs": [
-                    "member"
-                ],
-                "cn": [
-                    "add_user_to_default_group"
-                ],
-                "description": [
-                    "Add user to default group"
-                ],
-                "dn": "cn=add_user_to_default_group,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "useradmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "targetgroup": "ldap:///cn=ipausers,cn=groups,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "cn": [
-                    "removeusers"
-                ],
-                "description": [
-                    "Remove Users"
-                ],
-                "dn": "cn=removeusers,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "useradmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "type": "user"
-            },
-            {
-                "attrs": [
-                    "givenName",
-                    "sn",
-                    "cn",
-                    "displayName",
-                    "title",
-                    "initials",
-                    "loginShell",
-                    "gecos",
-                    "homePhone",
-                    "mobile",
-                    "pager",
-                    "facsimileTelephoneNumber",
-                    "telephoneNumber",
-                    "street",
-                    "roomNumber",
-                    "l",
-                    "st",
-                    "postalCode",
-                    "manager",
-                    "secretary",
-                    "description",
-                    "carLicense",
-                    "labeledURI",
-                    "inetUserHTTPURL",
-                    "seeAlso",
-                    "employeeType",
-                    "businessCategory",
-                    "ou",
-                    "mepManagedEntry",
-                    "objectclass"
-                ],
-                "cn": [
-                    "modifyusers"
-                ],
-                "description": [
-                    "Modify Users"
-                ],
-                "dn": "cn=modifyusers,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "useradmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "user"
-            },
-            {
-                "cn": [
-                    "addgroups"
-                ],
-                "description": [
-                    "Add Groups"
-                ],
-                "dn": "cn=addgroups,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "groupadmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "type": "group"
-            },
-            {
-                "cn": [
-                    "removegroups"
-                ],
-                "description": [
-                    "Remove Groups"
-                ],
-                "dn": "cn=removegroups,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "groupadmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "type": "group"
-            },
-            {
-                "attrs": [
-                    "cn",
-                    "description",
-                    "gidnumber",
-                    "objectclass",
-                    "mepManagedBy",
-                    "ipaUniqueId"
-                ],
-                "cn": [
-                    "modifygroups"
-                ],
-                "description": [
-                    "Modify Groups"
-                ],
-                "dn": "cn=modifygroups,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "groupadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "group"
-            },
-            {
-                "attrs": [
-                    "member"
-                ],
-                "cn": [
-                    "modifygroupmembership"
-                ],
-                "description": [
-                    "Modify Group membership"
-                ],
-                "dn": "cn=modifygroupmembership,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "groupadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "group"
-            },
-            {
-                "cn": [
-                    "addhosts"
-                ],
-                "description": [
-                    "Add Hosts"
-                ],
-                "dn": "cn=addhosts,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "hostadmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "type": "host"
-            },
-            {
-                "cn": [
-                    "removehosts"
-                ],
-                "description": [
-                    "Remove Hosts"
-                ],
-                "dn": "cn=removehosts,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "hostadmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "type": "host"
-            },
-            {
-                "attrs": [
-                    "description",
-                    "l",
-                    "nshostlocation",
-                    "nshardwareplatform",
-                    "nsosversion"
-                ],
-                "cn": [
-                    "modifyhosts"
-                ],
-                "description": [
-                    "Modify Hosts"
-                ],
-                "dn": "cn=modifyhosts,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "hostadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "host"
-            },
-            {
-                "cn": [
-                    "addhostgroups"
-                ],
-                "description": [
-                    "Add Hostgroups"
-                ],
-                "dn": "cn=addhostgroups,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "hostgroupadmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "type": "hostgroup"
-            },
-            {
                 "cn": [
-                    "removehostgroups"
+                    "subtree"
                 ],
                 "description": [
-                    "Remove Hostgroups"
+                    "Subtree Permission"
                 ],
-                "dn": "cn=removehostgroups,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "hostgroupadmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "type": "hostgroup"
-            },
-            {
-                "attrs": [
-                    "cn",
-                    "description"
-                ],
-                "cn": [
-                    "modifyhostgroups"
-                ],
-                "description": [
-                    "Modify Hostgroups"
-                ],
-                "dn": "cn=modifyhostgroups,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "hostgroupadmin"
+                "dn": "cn=subtree,cn=permissions,cn=pbac,dc=ipa",
+                "objectclass": [
+                    "groupofnames",
+                    "top"
                 ],
                 "permissions": [
                     "write"
                 ],
-                "type": "hostgroup"
+                "subtree": "ldap:///dc=ipa"
             },
             {
-                "attrs": [
-                    "member"
-                ],
                 "cn": [
-                    "modifyhostgroupmembership"
+                    "targetgroup"
                 ],
                 "description": [
-                    "Modify Hostgroup membership"
+                    "Target Group Permission"
                 ],
-                "dn": "cn=modifyhostgroupmembership,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "hostgroupadmin"
+                "dn": "cn=targetgroup,cn=permissions,cn=pbac,dc=ipa",
+                "objectclass": [
+                    "groupofnames",
+                    "top"
                 ],
                 "permissions": [
                     "write"
                 ],
-                "type": "hostgroup"
-            },
-            {
-                "cn": [
-                    "addservices"
-                ],
-                "description": [
-                    "Add Services"
-                ],
-                "dn": "cn=addservices,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "serviceadmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "type": "service"
-            },
-            {
-                "cn": [
-                    "removeservices"
-                ],
-                "description": [
-                    "Remove Services"
-                ],
-                "dn": "cn=removeservices,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "serviceadmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "type": "service"
-            },
-            {
-                "attrs": [
-                    "userCertificate"
-                ],
-                "cn": [
-                    "modifyservices"
-                ],
-                "description": [
-                    "Modify Services"
-                ],
-                "dn": "cn=modifyservices,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "serviceadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "service"
-            },
-            {
-                "cn": [
-                    "addroles"
-                ],
-                "description": [
-                    "Add Roles"
-                ],
-                "dn": "cn=addroles,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "delegationadmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "subtree": "ldap:///cn=*,cn=roles,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "cn": [
-                    "removeroles"
-                ],
-                "description": [
-                    "Remove Roles"
-                ],
-                "dn": "cn=removeroles,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "delegationadmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "subtree": "ldap:///cn=*,cn=roles,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
+                "targetgroup": "ipausers"
             },
             {
                 "attrs": [
@@ -415,473 +61,23 @@
                     "description"
                 ],
                 "cn": [
-                    "modifyroles"
+                    "type"
                 ],
                 "description": [
-                    "Modify Roles"
+                    "Type Permission"
                 ],
-                "dn": "cn=modifyroles,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "delegationadmin"
+                "dn": "cn=type,cn=permissions,cn=pbac,dc=ipa",
+                "objectclass": [
+                    "groupofnames",
+                    "top"
                 ],
                 "permissions": [
                     "write"
                 ],
-                "subtree": "ldap:///cn=*,cn=roles,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "attrs": [
-                    "member"
-                ],
-                "cn": [
-                    "modifyrolemembership"
-                ],
-                "description": [
-                    "Modify Role Group membership"
-                ],
-                "dn": "cn=modifyrolemembership,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "delegationadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "subtree": "ldap:///cn=*,cn=roles,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "attrs": [
-                    "member"
-                ],
-                "cn": [
-                    "modifyprivilegemembership"
-                ],
-                "description": [
-                    "Modify privilege membership"
-                ],
-                "dn": "cn=modifyprivilegemembership,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "delegationadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "subtree": "ldap:///cn=*,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "cn": [
-                    "addautomountmaps"
-                ],
-                "description": [
-                    "Add Automount maps"
-                ],
-                "dn": "cn=addautomountmaps,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "automountadmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "subtree": "ldap:///automountmapname=*,cn=automount,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "cn": [
-                    "removeautomountmaps"
-                ],
-                "description": [
-                    "Remove Automount maps"
-                ],
-                "dn": "cn=removeautomountmaps,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "automountadmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "subtree": "ldap:///automountmapname=*,cn=automount,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "cn": [
-                    "addautomountkeys"
-                ],
-                "description": [
-                    "Add Automount keys"
-                ],
-                "dn": "cn=addautomountkeys,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "automountadmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "subtree": "ldap:///automountkey=*,automountmapname=*,cn=automount,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "cn": [
-                    "removeautomountkeys"
-                ],
-                "description": [
-                    "Remove Automount keys"
-                ],
-                "dn": "cn=removeautomountkeys,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "automountadmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "subtree": "ldap:///automountkey=*,automountmapname=*,cn=automount,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "cn": [
-                    "addnetgroups"
-                ],
-                "description": [
-                    "Add netgroups"
-                ],
-                "dn": "cn=addnetgroups,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "netgroupadmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "type": "netgroup"
-            },
-            {
-                "cn": [
-                    "removenetgroups"
-                ],
-                "description": [
-                    "Remove netgroups"
-                ],
-                "dn": "cn=removenetgroups,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "netgroupadmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "type": "netgroup"
-            },
-            {
-                "attrs": [
-                    "description"
-                ],
-                "cn": [
-                    "modifynetgroups"
-                ],
-                "description": [
-                    "Modify netgroups"
-                ],
-                "dn": "cn=modifynetgroups,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "netgroupadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "netgroup"
-            },
-            {
-                "attrs": [
-                    "memberhost",
-                    "externalhost",
-                    "memberuser",
-                    "member"
-                ],
-                "cn": [
-                    "modifynetgroupmembership"
-                ],
-                "description": [
-                    "Modify netgroup membership"
-                ],
-                "dn": "cn=modifynetgroupmembership,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "netgroupadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "netgroup"
-            },
-            {
-                "attrs": [
-                    "krbPrincipalKey",
-                    "krbLastPwdChange"
-                ],
-                "cn": [
-                    "manage_host_keytab"
-                ],
-                "description": [
-                    "Manage host keytab"
-                ],
-                "dn": "cn=manage_host_keytab,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "hostadmin",
-                    "enrollhost"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "host"
-            },
-            {
-                "attrs": [
-                    "krbPrincipalKey",
-                    "krbLastPwdChange"
-                ],
-                "cn": [
-                    "manage_service_keytab"
-                ],
-                "description": [
-                    "Manage service keytab"
-                ],
-                "dn": "cn=manage_service_keytab,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "serviceadmin",
-                    "admins"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "service"
-            },
-            {
-                "attrs": [
-                    "enrolledBy",
-                    "objectClass"
-                ],
-                "cn": [
-                    "enroll_host"
-                ],
-                "description": [
-                    "Enroll a host"
-                ],
-                "dn": "cn=enroll_host,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "hostadmin",
-                    "enrollhost"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "type": "host"
-            },
-            {
-                "cn": [
-                    "managereplica"
-                ],
-                "description": [
-                    "Manage Replication Agreements"
-                ],
-                "dn": "cn=managereplica,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "replicaadmin"
-                ],
-                "memberindirect": [
-                    "uid=admin,cn=users,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                    "cn=admins,cn=groups,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-                ]
-            },
-            {
-                "cn": [
-                    "deletereplica"
-                ],
-                "description": [
-                    "Delete Replication Agreements"
-                ],
-                "dn": "cn=deletereplica,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "replicaadmin"
-                ],
-                "memberindirect": [
-                    "uid=admin,cn=users,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                    "cn=admins,cn=groups,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-                ]
-            },
-            {
-                "cn": [
-                    "addentitlements"
-                ],
-                "description": [
-                    "Add Entitlements"
-                ],
-                "dn": "cn=addentitlements,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "entitlementadmin"
-                ],
-                "permissions": [
-                    "add"
-                ],
-                "subtree": "ldap:///ipauniqueid=*,cn=entitlements,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "cn": [
-                    "removeentitlements"
-                ],
-                "description": [
-                    "Remove Entitlements"
-                ],
-                "dn": "cn=removeentitlements,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "entitlementadmin"
-                ],
-                "permissions": [
-                    "delete"
-                ],
-                "subtree": "ldap:///ipauniqueid=*,cn=entitlements,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "attrs": [
-                    "userCertificate"
-                ],
-                "cn": [
-                    "modifyentitlements"
-                ],
-                "description": [
-                    "Modify Entitlements"
-                ],
-                "dn": "cn=modifyentitlements,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "entitlementadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "subtree": "ldap:///ipauniqueid=*,cn=entitlements,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "attrs": [
-                    "objectClass"
-                ],
-                "cn": [
-                    "retrieve_certs"
-                ],
-                "description": [
-                    "Retrieve Certificates from the CA"
-                ],
-                "dn": "cn=retrieve_certs,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "certadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "subtree": "ldap:///cn=retrieve certificate,cn=virtual operations,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "attrs": [
-                    "objectClass"
-                ],
-                "cn": [
-                    "request_certs"
-                ],
-                "description": [
-                    "Request Certificates from the CA"
-                ],
-                "dn": "cn=request_certs,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "certadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "subtree": "ldap:///cn=request certificate,cn=virtual operations,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "attrs": [
-                    "objectClass"
-                ],
-                "cn": [
-                    "request_cert_different_host"
-                ],
-                "description": [
-                    "Request Certificates from a different host"
-                ],
-                "dn": "cn=request_cert_different_host,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "certadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "subtree": "ldap:///cn=request certificate different host,cn=virtual operations,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "attrs": [
-                    "objectClass"
-                ],
-                "cn": [
-                    "certificate_status"
-                ],
-                "description": [
-                    "Get Certificates status from the CA"
-                ],
-                "dn": "cn=certificate_status,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "certadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "subtree": "ldap:///cn=certificate status,cn=virtual operations,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "attrs": [
-                    "objectClass"
-                ],
-                "cn": [
-                    "revoke_certificate"
-                ],
-                "description": [
-                    "Revoke Certificate"
-                ],
-                "dn": "cn=revoke_certificate,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "certadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "subtree": "ldap:///cn=revoke certificate,cn=virtual operations,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "attrs": [
-                    "objectClass"
-                ],
-                "cn": [
-                    "certificate_remove_hold"
-                ],
-                "description": [
-                    "Certificate Remove Hold"
-                ],
-                "dn": "cn=certificate_remove_hold,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "certadmin"
-                ],
-                "permissions": [
-                    "write"
-                ],
-                "subtree": "ldap:///cn=certificate remove hold,cn=virtual operations,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-            },
-            {
-                "cn": [
-                    "update_dns"
-                ],
-                "description": [
-                    "DNS Servers Updates"
-                ],
-                "dn": "cn=update_dns,cn=permissions,cn=pbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
-                "member_privilege": [
-                    "dnsadmin",
-                    "dnsserver"
-                ],
-                "memberindirect": [
-                    "krbprincipalname=dns/ipa.ayoung.boston.devel.redhat.com@ayoung.boston.devel.redhat.com,cn=services,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
-                ]
+                "type": "user"
             }
         ],
-        "summary": "47 permissions matched",
+        "summary": "4 permissions matched",
         "truncated": false
     }
 }
diff --git a/install/ui/test/data/permission_show.json b/install/ui/test/data/permission_show.json
index d823061d5..0d5784274 100644
--- a/install/ui/test/data/permission_show.json
+++ b/install/ui/test/data/permission_show.json
@@ -16,24 +16,30 @@
                 "owner": "rscwo",
                 "seealso": "rscwo"
             },
+            "attrs": [
+                "cn",
+                "description",
+                "unmatched"
+            ],
             "cn": [
-                "addusers"
+                "test"
             ],
             "description": [
-                "Add Users"
+                "Test Permission"
             ],
-            "dn": "cn=addusers,cn=permissions,cn=hbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
+            "dn": "cn=test,cn=permissions,cn=hbac,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
             "member": [
                 "cn=useradmin,cn=privileges,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
             ],
             "objectclass": [
-                "top",
-                "groupofnames"
+                "groupofnames",
+                "top"
             ],
             "permissions": [
-                "add"
+                "add",
+                "delete"
             ],
-            "type": "user"
+            "type": "group"
         },
         "summary": null,
         "value": "addusers"
diff --git a/install/ui/test/data/permission_show_filter.json b/install/ui/test/data/permission_show_filter.json
new file mode 100644
index 000000000..a7390b4dd
--- /dev/null
+++ b/install/ui/test/data/permission_show_filter.json
@@ -0,0 +1,38 @@
+{
+    "error": null,
+    "id": 0,
+    "result": {
+        "result": {
+            "attributelevelrights": {
+                "aci": "rscwo",
+                "businesscategory": "rscwo",
+                "cn": "rscwo",
+                "description": "rscwo",
+                "member": "rscwo",
+                "nsaccountlock": "rscwo",
+                "o": "rscwo",
+                "objectclass": "rscwo",
+                "ou": "rscwo",
+                "owner": "rscwo",
+                "seealso": "rscwo"
+            },
+            "cn": [
+                "filter"
+            ],
+            "description": [
+                "Filter Permission"
+            ],
+            "dn": "cn=filter,cn=permissions,cn=pbac,dc=ipa",
+            "filter": "(ou=Engineering)",
+            "objectclass": [
+                "groupofnames",
+                "top"
+            ],
+            "permissions": [
+                "write"
+            ]
+        },
+        "summary": null,
+        "value": "filter"
+    }
+}
diff --git a/install/ui/test/data/permission_show_subtree.json b/install/ui/test/data/permission_show_subtree.json
new file mode 100644
index 000000000..24255d4e9
--- /dev/null
+++ b/install/ui/test/data/permission_show_subtree.json
@@ -0,0 +1,38 @@
+{
+    "error": null,
+    "id": 0,
+    "result": {
+        "result": {
+            "attributelevelrights": {
+                "aci": "rscwo",
+                "businesscategory": "rscwo",
+                "cn": "rscwo",
+                "description": "rscwo",
+                "member": "rscwo",
+                "nsaccountlock": "rscwo",
+                "o": "rscwo",
+                "objectclass": "rscwo",
+                "ou": "rscwo",
+                "owner": "rscwo",
+                "seealso": "rscwo"
+            },
+            "cn": [
+                "subtree"
+            ],
+            "description": [
+                "Subtree Permission"
+            ],
+            "dn": "cn=subtree,cn=permissions,cn=pbac,dc=ipa",
+            "objectclass": [
+                "groupofnames",
+                "top"
+            ],
+            "permissions": [
+                "write"
+            ],
+            "subtree": "ldap:///dc=ipa"
+        },
+        "summary": null,
+        "value": "subtree"
+    }
+}
diff --git a/install/ui/test/data/permission_show_targetgroup.json b/install/ui/test/data/permission_show_targetgroup.json
new file mode 100644
index 000000000..0a140c201
--- /dev/null
+++ b/install/ui/test/data/permission_show_targetgroup.json
@@ -0,0 +1,38 @@
+{
+    "error": null,
+    "id": 0,
+    "result": {
+        "result": {
+            "attributelevelrights": {
+                "aci": "rscwo",
+                "businesscategory": "rscwo",
+                "cn": "rscwo",
+                "description": "rscwo",
+                "member": "rscwo",
+                "nsaccountlock": "rscwo",
+                "o": "rscwo",
+                "objectclass": "rscwo",
+                "ou": "rscwo",
+                "owner": "rscwo",
+                "seealso": "rscwo"
+            },
+            "cn": [
+                "targetgroup"
+            ],
+            "description": [
+                "Target Group Permission"
+            ],
+            "dn": "cn=group,cn=permissions,cn=pbac,dc=ipa",
+            "objectclass": [
+                "groupofnames",
+                "top"
+            ],
+            "permissions": [
+                "write"
+            ],
+            "targetgroup": "ipausers"
+        },
+        "summary": null,
+        "value": "group"
+    }
+}
diff --git a/install/ui/test/data/permission_show_type.json b/install/ui/test/data/permission_show_type.json
new file mode 100644
index 000000000..5407ed29c
--- /dev/null
+++ b/install/ui/test/data/permission_show_type.json
@@ -0,0 +1,43 @@
+{
+    "error": null,
+    "id": 0,
+    "result": {
+        "result": {
+            "attributelevelrights": {
+                "aci": "rscwo",
+                "businesscategory": "rscwo",
+                "cn": "rscwo",
+                "description": "rscwo",
+                "member": "rscwo",
+                "nsaccountlock": "rscwo",
+                "o": "rscwo",
+                "objectclass": "rscwo",
+                "ou": "rscwo",
+                "owner": "rscwo",
+                "seealso": "rscwo"
+            },
+            "attrs": [
+                "unmatched",
+                "cn",
+                "description"
+            ],
+            "cn": [
+                "type"
+            ],
+            "description": [
+                "Type Permission"
+            ],
+            "dn": "cn=type,cn=permissions,cn=pbac,dc=ipa",
+            "objectclass": [
+                "groupofnames",
+                "top"
+            ],
+            "permissions": [
+                "write"
+            ],
+            "type": "group"
+        },
+        "summary": null,
+        "value": "type"
+    }
+}