diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-03-26 15:33:49 +0100 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-04-09 13:40:42 +0200 |
| commit | 39327dbb75e92e4184bdda2dbd802cf349866861 (patch) | |
| tree | e221a698e3e9681e755c9533371e52e6d2fc3173 /ipalib/plugins/hbacsvc.py | |
| parent | 218a2617427a63c7e3d79427923e7986411af786 (diff) | |
| download | freeipa-39327dbb75e92e4184bdda2dbd802cf349866861.tar.gz freeipa-39327dbb75e92e4184bdda2dbd802cf349866861.tar.xz freeipa-39327dbb75e92e4184bdda2dbd802cf349866861.zip | |
Add managed read permissions to HBAC objects
Part of the work for: https://fedorahosted.org/freeipa/ticket/3566
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipalib/plugins/hbacsvc.py')
| -rw-r--r-- | ipalib/plugins/hbacsvc.py | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/ipalib/plugins/hbacsvc.py b/ipalib/plugins/hbacsvc.py index 6c6bc94fe..58861fcfa 100644 --- a/ipalib/plugins/hbacsvc.py +++ b/ipalib/plugins/hbacsvc.py @@ -57,11 +57,22 @@ class hbacsvc(LDAPObject): object_name = _('HBAC service') object_name_plural = _('HBAC services') object_class = [ 'ipaobject', 'ipahbacservice' ] + permission_filter_objectclasses = ['ipahbacservice'] default_attributes = ['cn', 'description', 'memberof'] uuid_attribute = 'ipauniqueid' attribute_members = { 'memberof': ['hbacsvcgroup'], } + managed_permissions = { + 'System: Read HBAC Services': { + 'replaces_global_anonymous_aci': True, + 'ipapermbindruletype': 'all', + 'ipapermright': {'read', 'search', 'compare'}, + 'ipapermdefaultattr': { + 'cn', 'description', 'ipauniqueid', 'memberof', 'objectclass', + }, + }, + } label = _('HBAC Services') label_singular = _('HBAC Service') |