summaryrefslogtreecommitdiffstats
path: root/ipalib/plugins/pwpolicy.py
diff options
context:
space:
mode:
authorPetr Viktorin <pviktori@redhat.com>2014-06-09 17:59:53 +0200
committerPetr Viktorin <pviktori@redhat.com>2014-06-11 13:21:29 +0200
commit2f3cdba54620989afba0ce1b423cddb56b841ab3 (patch)
tree9a2375c4dbdb117f39bc3f6f0a86130b20f190d4 /ipalib/plugins/pwpolicy.py
parent6acaf73b0c6f7301d5a5d4292a4f9926cc370867 (diff)
downloadfreeipa-2f3cdba54620989afba0ce1b423cddb56b841ab3.tar.gz
freeipa-2f3cdba54620989afba0ce1b423cddb56b841ab3.tar.xz
freeipa-2f3cdba54620989afba0ce1b423cddb56b841ab3.zip
Make 'permission' the default bind type for managed permissions
This reduces typing (or copy/pasting), and draws a bit of attention to any non-default privileges (currently 'any' or 'anonymous'). Leaving the bindtype out by mistake isn't dangerous: by default a permission is not granted to anyone, since it is not included in any priviliges. Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipalib/plugins/pwpolicy.py')
-rw-r--r--ipalib/plugins/pwpolicy.py1
1 files changed, 0 insertions, 1 deletions
diff --git a/ipalib/plugins/pwpolicy.py b/ipalib/plugins/pwpolicy.py
index ee7f388ba..a0850ccf4 100644
--- a/ipalib/plugins/pwpolicy.py
+++ b/ipalib/plugins/pwpolicy.py
@@ -87,7 +87,6 @@ class cosentry(LDAPObject):
managed_permissions = {
'System: Read Group Password Policy costemplate': {
'replaces_global_anonymous_aci': True,
- 'ipapermbindruletype': 'permission',
'ipapermright': {'read', 'search', 'compare'},
'ipapermdefaultattr': {
'cn', 'cospriority', 'krbpwdpolicyreference', 'objectclass',