diff options
| -rw-r--r-- | ipalib/plugins/baseldap.py | 2 | ||||
| -rw-r--r-- | ipalib/plugins/pwpolicy.py | 6 |
2 files changed, 6 insertions, 2 deletions
diff --git a/ipalib/plugins/baseldap.py b/ipalib/plugins/baseldap.py index 6bf9b3b3e..d742a791e 100644 --- a/ipalib/plugins/baseldap.py +++ b/ipalib/plugins/baseldap.py @@ -151,7 +151,7 @@ def get_attributes(attrs): def get_effective_rights(ldap, dn, attrs=None): if attrs is None: - attrs = ['*', 'nsaccountlock'] + attrs = ['*', 'nsaccountlock', 'cospriority'] rights = ldap.get_effective_rights(dn, attrs) rdict = {} if 'attributelevelrights' in rights[1]: diff --git a/ipalib/plugins/pwpolicy.py b/ipalib/plugins/pwpolicy.py index 7a83216f3..f1e708e71 100644 --- a/ipalib/plugins/pwpolicy.py +++ b/ipalib/plugins/pwpolicy.py @@ -401,7 +401,7 @@ class pwpolicy_show(LDAPRetrieve): """ Display information about password policy. """ - takes_options = ( + takes_options = LDAPRetrieve.takes_options + ( Str('user?', label=_('User'), doc=_('Display effective policy for a specific user'), @@ -428,6 +428,10 @@ class pwpolicy_show(LDAPRetrieve): entry_attrs['cospriority'] = cos_entry['cospriority'] except errors.NotFound: pass + if options.get('rights', False) and options.get('all', False) and \ + keys[-1] is not None: + cos_entry = self.api.Command.cosentry_show(keys[-1], rights=True, all=True)['result'] + entry_attrs['attributelevelrights']['cospriority'] = cos_entry['attributelevelrights']['cospriority'] self.obj.convert_time_for_output(entry_attrs, **options) return dn |