diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2013-09-13 16:08:22 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-02-12 17:11:17 +0100 |
| commit | 3db08227e8c760c688b8886e0b3b072e9b6dd94d (patch) | |
| tree | 225e3ea4f648e17500488ef5fea709554995a2a1 /ipalib/parameters.py | |
| parent | eb14f99ece71170758399c16bee5b07a866f3775 (diff) | |
| download | freeipa-3db08227e8c760c688b8886e0b3b072e9b6dd94d.tar.gz freeipa-3db08227e8c760c688b8886e0b3b072e9b6dd94d.tar.xz freeipa-3db08227e8c760c688b8886e0b3b072e9b6dd94d.zip | |
Add support for managed permissions
This adds support for managed permissions. The attribute list
of these is computed from the "default" (modifiable only internally),
"allowed", and "excluded" lists. This makes it possible to cleanly
merge updated IPA defaults and user changes on upgrades.
The default managed permissions are to be added in a future patch.
For now they can only be created manually (see test_managed_permissions).
Tests included.
Part of the work for: https://fedorahosted.org/freeipa/ticket/4033
Design: http://www.freeipa.org/page/V3/Managed_Read_permissions
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipalib/parameters.py')
| -rw-r--r-- | ipalib/parameters.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/ipalib/parameters.py b/ipalib/parameters.py index 757c18565..b4fb3402d 100644 --- a/ipalib/parameters.py +++ b/ipalib/parameters.py @@ -353,6 +353,8 @@ class Param(ReadOnly): can be unspecified (unchanged) but cannot be deleted. * optional_create: do not require the parameter for crud.Create based commands + * allow_mod_for_managed_permission: permission-mod allows changing + the parameter for managed permissions - hint: this attribute is currently not used - alwaysask: when enabled, CLI asks for parameter value even when the parameter is not `required` |