diff options
author | Rob Crittenden <rcritten@redhat.com> | 2010-12-17 15:04:47 -0500 |
---|---|---|
committer | Adam Young <ayoung@redhat.com> | 2010-12-17 17:16:25 -0500 |
commit | 1207a7c83f89fccbd38c28e2c0c2307a55956a9d (patch) | |
tree | 0572b05bc80f2749847348e7d7578d574ba4dc09 /ipalib/plugins/permission.py | |
parent | b66c680f862e1dd2ff788ec593fb2f5dee7e43ab (diff) | |
download | freeipa-1207a7c83f89fccbd38c28e2c0c2307a55956a9d.tar.gz freeipa-1207a7c83f89fccbd38c28e2c0c2307a55956a9d.tar.xz freeipa-1207a7c83f89fccbd38c28e2c0c2307a55956a9d.zip |
Fix the change_password permissions and the DNS access controls.
The change_password permission was too broad, limit it to users.
The DNS access controls rolled everything into a single ACI. I broke
it out into separate ACIs for add, delete and add. I also added a new
dns type for the permission plugin.
ticket 628
Diffstat (limited to 'ipalib/plugins/permission.py')
-rw-r--r-- | ipalib/plugins/permission.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py index 18dd577e7..0587564ed 100644 --- a/ipalib/plugins/permission.py +++ b/ipalib/plugins/permission.py @@ -120,7 +120,7 @@ class permission(LDAPObject): cli_name='type', label=_('Type'), doc=_('Type of IPA object (user, group, host, hostgroup, service, netgroup)'), - values=(u'user', u'group', u'host', u'service', u'hostgroup', u'netgroup'), + values=(u'user', u'group', u'host', u'service', u'hostgroup', u'netgroup', u'dns',), ), Str('memberof?', cli_name='memberof', |