diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-06-09 17:59:53 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-06-11 13:21:29 +0200 |
| commit | 2f3cdba54620989afba0ce1b423cddb56b841ab3 (patch) | |
| tree | 9a2375c4dbdb117f39bc3f6f0a86130b20f190d4 /ipalib/plugins/automember.py | |
| parent | 6acaf73b0c6f7301d5a5d4292a4f9926cc370867 (diff) | |
| download | freeipa-2f3cdba54620989afba0ce1b423cddb56b841ab3.tar.gz freeipa-2f3cdba54620989afba0ce1b423cddb56b841ab3.tar.xz freeipa-2f3cdba54620989afba0ce1b423cddb56b841ab3.zip | |
Make 'permission' the default bind type for managed permissions
This reduces typing (or copy/pasting), and draws a bit of attention
to any non-default privileges (currently 'any' or 'anonymous').
Leaving the bindtype out by mistake isn't dangerous: by default
a permission is not granted to anyone, since it is not included in
any priviliges.
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipalib/plugins/automember.py')
| -rw-r--r-- | ipalib/plugins/automember.py | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/ipalib/plugins/automember.py b/ipalib/plugins/automember.py index ddcd5210c..0f4739316 100644 --- a/ipalib/plugins/automember.py +++ b/ipalib/plugins/automember.py @@ -199,7 +199,6 @@ class automember(LDAPObject): 'ipapermlocation': DN(container_dn, api.env.basedn), 'ipapermtargetfilter': {'(objectclass=automemberdefinition)'}, 'replaces_global_anonymous_aci': True, - 'ipapermbindruletype': 'permission', 'ipapermright': {'read', 'search', 'compare'}, 'ipapermdefaultattr': { 'objectclass', 'cn', 'automemberscope', 'automemberfilter', @@ -211,7 +210,6 @@ class automember(LDAPObject): }, 'System: Read Automember Rules': { 'replaces_global_anonymous_aci': True, - 'ipapermbindruletype': 'permission', 'ipapermright': {'read', 'search', 'compare'}, 'ipapermdefaultattr': { 'cn', 'objectclass', 'automembertargetgroup', 'description', @@ -225,7 +223,6 @@ class automember(LDAPObject): 'ipapermlocation': DN('cn=tasks', 'cn=config'), 'ipapermtarget': DN('cn=*', REBUILD_TASK_CONTAINER), 'replaces_global_anonymous_aci': True, - 'ipapermbindruletype': 'permission', 'ipapermright': {'read', 'search', 'compare'}, 'ipapermdefaultattr': {'*'}, 'default_privileges': {'Automember Task Administrator'}, |