diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2008-03-04 14:27:06 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2008-03-04 14:27:06 -0500 |
| commit | 74c29b1bf631a66cb9e8a62aa2e80a3c84526dcf (patch) | |
| tree | cbf0b7f4c66365c416b7a15dbf995509eb9ec358 /ipa-server/ipa-gui | |
| parent | ea539229516029067d8bb132830577beeed98551 (diff) | |
| download | freeipa-74c29b1bf631a66cb9e8a62aa2e80a3c84526dcf.tar.gz freeipa-74c29b1bf631a66cb9e8a62aa2e80a3c84526dcf.tar.xz freeipa-74c29b1bf631a66cb9e8a62aa2e80a3c84526dcf.zip | |
Remove the ability for the average user to add/delete groups on user edit page
If they have any delegations at all (are in editors group) they will have
these links.
433387
Diffstat (limited to 'ipa-server/ipa-gui')
| -rw-r--r-- | ipa-server/ipa-gui/ipagui/templates/usereditform.kid | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/ipa-server/ipa-gui/ipagui/templates/usereditform.kid b/ipa-server/ipa-gui/ipagui/templates/usereditform.kid index 6fde76481..e6d9b7d25 100644 --- a/ipa-server/ipa-gui/ipagui/templates/usereditform.kid +++ b/ipa-server/ipa-gui/ipagui/templates/usereditform.kid @@ -814,7 +814,7 @@ from ipagui.helpers import ipahelper <h2 class="formsection">Groups</h2> <div class="floatlist"> - <div class="floatheader">To Remove:</div> + <div py:if="'editors' in tg.identity.groups or 'admins' in tg.identity.groups or tg.identity.display_name != value.get('uid')" class="floatheader">To Remove:</div> <div id="delmembers"> </div> </div> @@ -841,7 +841,7 @@ from ipagui.helpers import ipahelper '${group_descr_esc}', '${group_type_esc}')); </script> - <a href="#" + <a py:if="'editors' in tg.identity.groups or 'admins' in tg.identity.groups or tg.identity.display_name != value.get('uid')" href="#" onclick="removememberHandler(this, '${group_dn_esc}', new MemberDisplayInfo('${group_name_esc}', '${group_descr_esc}', @@ -861,7 +861,7 @@ from ipagui.helpers import ipahelper </div> - <div style="clear:both"> + <div py:if="'editors' in tg.identity.groups or 'admins' in tg.identity.groups or tg.identity.display_name != value.get('uid')" style="clear:both"> <h2 class="formsection">Add Groups</h2> <div class="floatlist"> |