diff options
| author | root <root@vm-205.idm.lab.eng.brq.redhat.com> | 2015-06-19 17:27:11 +0200 |
|---|---|---|
| committer | Tomas Babej <tbabej@redhat.com> | 2015-06-29 13:50:04 +0200 |
| commit | ffd6b039a755016c3de22a11fec037eca7180a79 (patch) | |
| tree | 6e5759cd3f6146c72b8d69b74822e59cdab7c2d2 /ipalib/plugins/stageuser.py | |
| parent | e3d3938f44a2444e18620b43b5734a8f27bb2c8b (diff) | |
| download | freeipa-ffd6b039a755016c3de22a11fec037eca7180a79.tar.gz freeipa-ffd6b039a755016c3de22a11fec037eca7180a79.tar.xz freeipa-ffd6b039a755016c3de22a11fec037eca7180a79.zip | |
User life cycle: permission to delete a preserved user
Add permission to delete an entry from Delete container
https://fedorahosted.org/freeipa/ticket/3813
Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'ipalib/plugins/stageuser.py')
| -rw-r--r-- | ipalib/plugins/stageuser.py | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/ipalib/plugins/stageuser.py b/ipalib/plugins/stageuser.py index 18e09e957..7c714f627 100644 --- a/ipalib/plugins/stageuser.py +++ b/ipalib/plugins/stageuser.py @@ -202,6 +202,16 @@ class stageuser(baseuser): }, 'default_privileges': {'Stage User Administrators'}, }, + # Allow to delete preserved user + 'System: Remove preserved User': { + 'ipapermlocation': DN(baseuser.delete_container_dn, api.env.basedn), + 'ipapermbindruletype': 'permission', + 'ipapermtarget': DN('uid=*', baseuser.delete_container_dn, api.env.basedn), + 'ipapermtargetfilter': {'(objectclass=*)'}, + 'ipapermright': {'delete'}, + 'ipapermdefaultattr': {'*'}, + 'default_privileges': {'Stage User Administrators'}, + }, # # Active container # |