diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-06-23 13:23:49 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2014-06-24 13:53:41 +0200 |
| commit | 175b19bbf85d0aff91c0dec278cb66fce98b469c (patch) | |
| tree | de320f8c42860b3dd225932e343d3ca837e0136b /ipalib/plugins/privilege.py | |
| parent | 52003a9ffb2e335f613b1392eb9b7bdc1a46792b (diff) | |
| download | freeipa-175b19bbf85d0aff91c0dec278cb66fce98b469c.tar.gz freeipa-175b19bbf85d0aff91c0dec278cb66fce98b469c.tar.xz freeipa-175b19bbf85d0aff91c0dec278cb66fce98b469c.zip | |
Add several CRUD default permissions
Add missing Add, Modify, Removedefault permissions to:
- automountlocation (Add/Remove only; locations have
no data to modify)
- privilege
- sudocmdgroup (Modify only; the others were present)
Related to: https://fedorahosted.org/freeipa/ticket/4346
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipalib/plugins/privilege.py')
| -rw-r--r-- | ipalib/plugins/privilege.py | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/ipalib/plugins/privilege.py b/ipalib/plugins/privilege.py index cff6fe197..6a503709e 100644 --- a/ipalib/plugins/privilege.py +++ b/ipalib/plugins/privilege.py @@ -75,6 +75,22 @@ class privilege(LDAPObject): }, 'default_privileges': {'RBAC Readers'}, }, + 'System: Add Privileges': { + 'ipapermright': {'add'}, + 'default_privileges': {'Delegation Administrator'}, + }, + 'System: Modify Privileges': { + 'ipapermright': {'write'}, + 'ipapermdefaultattr': { + 'businesscategory', 'cn', 'description', 'o', 'ou', 'owner', + 'seealso', + }, + 'default_privileges': {'Delegation Administrator'}, + }, + 'System: Remove Privileges': { + 'ipapermright': {'delete'}, + 'default_privileges': {'Delegation Administrator'}, + }, } label = _('Privileges') |