diff options
| -rw-r--r-- | ipalib/plugins/group.py | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/ipalib/plugins/group.py b/ipalib/plugins/group.py index 318f0746a..644954d94 100644 --- a/ipalib/plugins/group.py +++ b/ipalib/plugins/group.py @@ -137,6 +137,26 @@ class group(LDAPObject): 'sudorule'], } rdn_is_primary_key = True + managed_permissions = { + 'System: Read Groups': { + 'replaces_global_anonymous_aci': True, + 'ipapermbindruletype': 'anonymous', + 'ipapermright': {'read', 'search', 'compare'}, + 'ipapermdefaultattr': { + 'businesscategory', 'cn', 'description', 'gidnumber', + 'ipaexternalmember', 'ipauniqueid', 'mepmanagedby', 'o', + 'objectclass', 'ou', 'owner', 'seealso', + }, + }, + 'System: Read Group Membership': { + 'replaces_global_anonymous_aci': True, + 'ipapermbindruletype': 'all', + 'ipapermright': {'read', 'search', 'compare'}, + 'ipapermdefaultattr': { + 'member', 'memberof', 'memberuid', + }, + }, + } label = _('User Groups') label_singular = _('User Group') |