summaryrefslogtreecommitdiffstats
path: root/ipalib/plugins/hbacsvcgroup.py
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2010-10-26 13:56:54 -0400
committerRob Crittenden <rcritten@redhat.com>2010-10-28 17:34:34 -0400
commitc1dfb50ee9be266e3448ad53acd8a6464938c604 (patch)
tree595769d6959e3340cdcb20f14305568a4d42b8da /ipalib/plugins/hbacsvcgroup.py
parent4f8e4482b316cc5996986bdfae12cc27be27df5e (diff)
downloadfreeipa-c1dfb50ee9be266e3448ad53acd8a6464938c604.tar.gz
freeipa-c1dfb50ee9be266e3448ad53acd8a6464938c604.tar.xz
freeipa-c1dfb50ee9be266e3448ad53acd8a6464938c604.zip
Remove group nesting from the HBAC service groups
ticket 389
Diffstat (limited to 'ipalib/plugins/hbacsvcgroup.py')
-rw-r--r--ipalib/plugins/hbacsvcgroup.py12
1 files changed, 3 insertions, 9 deletions
diff --git a/ipalib/plugins/hbacsvcgroup.py b/ipalib/plugins/hbacsvcgroup.py
index 682a6c4e6..3bbf660ee 100644
--- a/ipalib/plugins/hbacsvcgroup.py
+++ b/ipalib/plugins/hbacsvcgroup.py
@@ -20,8 +20,7 @@
HBAC Service Groups
HBAC service groups can contain any number of individual services,
-or "members", and can also contain other service groups. Every group must
-have a description.
+or "members". Every group must have a description.
EXAMPLES:
@@ -37,7 +36,6 @@ EXAMPLES:
Add a new group to the "login" group:
ipa hbacsvcgroup-add --desc="switch users" suers
ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l suers
- ipa hbacsvsgroup-add-member --hbacsvsgroups=suers login
Delete an HBAC services group:
ipa hbacsvcgroup-del login
@@ -56,14 +54,10 @@ class hbacsvcgroup(LDAPObject):
object_name = 'hbacsvcgroup'
object_name_plural = 'hbacsvcgroups'
object_class = ['ipaobject', 'ipahbacservicegroup']
- default_attributes = [ 'cn', 'description', 'member', 'memberof',
- 'memberindirect',
- ]
+ default_attributes = [ 'cn', 'description', 'member' ]
uuid_attribute = 'ipauniqueid'
attribute_members = {
- 'member': ['hbacsvc', 'hbacsvcgroup'],
- 'memberof': ['hbacsvcgroup'],
- 'memberindirect': ['hbacsvc', 'hbacsvcgroup'],
+ 'member': ['hbacsvc'],
}
label = _('HBAC Service Groups')