diff options
| -rw-r--r-- | ipalib/plugins/config.py | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/ipalib/plugins/config.py b/ipalib/plugins/config.py index 05369be4e..4ac411c74 100644 --- a/ipalib/plugins/config.py +++ b/ipalib/plugins/config.py @@ -94,6 +94,28 @@ class config(LDAPObject): 'ipaselinuxusermapdefault', 'ipaconfigstring', 'ipakrbauthzdata', 'ipauserauthtype' ] + container_dn = DN(('cn', 'ipaconfig'), ('cn', 'etc')) + permission_filter_objectclasses = ['ipaguiconfig'] + managed_permissions = { + 'System: Read Global Configuration': { + 'replaces_global_anonymous_aci': True, + 'ipapermbindruletype': 'all', + 'ipapermright': {'read', 'search', 'compare'}, + 'ipapermdefaultattr': { + 'cn', 'objectclass', + 'ipacertificatesubjectbase', 'ipaconfigstring', + 'ipadefaultemaildomain', 'ipadefaultloginshell', + 'ipadefaultprimarygroup', 'ipagroupobjectclasses', + 'ipagroupsearchfields', 'ipahomesrootdir', + 'ipakrbauthzdata', 'ipamaxusernamelength', + 'ipamigrationenabled', 'ipapwdexpadvnotify', + 'ipaselinuxusermapdefault', 'ipaselinuxusermaporder', + 'ipasearchrecordslimit', 'ipasearchtimelimit', + 'ipauserauthtype', 'ipauserobjectclasses', + 'ipausersearchfields', 'ipacustomfields', + }, + }, + } label = _('Configuration') label_singular = _('Configuration') |