diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2014-09-19 16:20:42 +0300 |
|---|---|---|
| committer | Alexander Bokovoy <abokovoy@redhat.com> | 2014-09-24 15:20:43 +0300 |
| commit | 1756629835efb677244cb4e77760a1784485a069 (patch) | |
| tree | 6cc88ff037fc32eeb5195c8607c860785499ff03 /ipaserver | |
| parent | c78fee3b1623666a7dd2b091d4f71906efec3c8d (diff) | |
| download | freeipa-views.tar.gz freeipa-views.tar.xz freeipa-views.zip | |
WIP: support idviews in compat treeviews
Diffstat (limited to 'ipaserver')
| -rw-r--r-- | ipaserver/install/plugins/update_managed_permissions.py | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/ipaserver/install/plugins/update_managed_permissions.py b/ipaserver/install/plugins/update_managed_permissions.py index df49d5d32..cff480a80 100644 --- a/ipaserver/install/plugins/update_managed_permissions.py +++ b/ipaserver/install/plugins/update_managed_permissions.py @@ -117,6 +117,16 @@ NONOBJECT_PERMISSIONS = { }, 'default_privileges': {'IPA Masters Readers'}, }, + 'System: Compat Tree ID View targets': { + 'replaces_global_anonymous_aci': True, + 'ipapermlocation': DN('cn=compat', api.env.basedn), + 'ipapermtargetfilter': {'(objectclass=ipaOverrideTarget)'}, + 'ipapermbindruletype': 'anonymous', + 'ipapermright': {'read', 'search', 'compare'}, + 'ipapermdefaultattr': { + 'ipaAnchorUUID', + }, + }, 'System: Read DNA Configuration': { 'replaces_global_anonymous_aci': True, 'ipapermlocation': DN('cn=dna,cn=ipa,cn=etc', api.env.basedn), |