diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-06-09 17:59:53 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-06-11 13:21:29 +0200 |
| commit | 2f3cdba54620989afba0ce1b423cddb56b841ab3 (patch) | |
| tree | 9a2375c4dbdb117f39bc3f6f0a86130b20f190d4 /ipalib/plugins/permission.py | |
| parent | 6acaf73b0c6f7301d5a5d4292a4f9926cc370867 (diff) | |
| download | freeipa-2f3cdba54620989afba0ce1b423cddb56b841ab3.tar.gz freeipa-2f3cdba54620989afba0ce1b423cddb56b841ab3.tar.xz freeipa-2f3cdba54620989afba0ce1b423cddb56b841ab3.zip | |
Make 'permission' the default bind type for managed permissions
This reduces typing (or copy/pasting), and draws a bit of attention
to any non-default privileges (currently 'any' or 'anonymous').
Leaving the bindtype out by mistake isn't dangerous: by default
a permission is not granted to anyone, since it is not included in
any priviliges.
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipalib/plugins/permission.py')
| -rw-r--r-- | ipalib/plugins/permission.py | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py index 814bf191b..bd225b92a 100644 --- a/ipalib/plugins/permission.py +++ b/ipalib/plugins/permission.py @@ -185,7 +185,6 @@ class permission(baseldap.LDAPObject): managed_permissions = { 'System: Read Permissions': { 'replaces_global_anonymous_aci': True, - 'ipapermbindruletype': 'permission', 'ipapermright': {'read', 'search', 'compare'}, 'ipapermdefaultattr': { 'businesscategory', 'cn', 'description', 'ipapermissiontype', @@ -202,7 +201,6 @@ class permission(baseldap.LDAPObject): 'non_object': True, 'ipapermlocation': api.env.basedn, 'replaces_global_anonymous_aci': True, - 'ipapermbindruletype': 'permission', 'ipapermright': {'read', 'search', 'compare'}, 'ipapermdefaultattr': {'aci'}, 'default_privileges': {'RBAC Readers'}, |