1 files changed, 23 insertions, 0 deletions
diff --git a/ipalib/plugins/idviews.py b/ipalib/plugins/idviews.py
index b4909de91..e7a26dea2 100644
--- a/ipalib/plugins/idviews.py
+++ b/ipalib/plugins/idviews.py
@@ -64,6 +64,17 @@ class idview(LDAPObject):
         ),
     )
 
+    permission_filter_objectclasses = ['nsContainer']
+    managed_permissions = {
+        'System: Read ID Views': {
+            'ipapermbindruletype': 'all',
+            'ipapermright': {'read', 'search', 'compare'},
+            'ipapermdefaultattr': {
+                'cn', 'description', 'objectClass',
+            },
+        },
+    }
+
 
 @register()
 class idview_add(LDAPCreate):
@@ -160,6 +171,18 @@ class idoverride(LDAPObject):
         ),
     )
 
+    permission_filter_objectclasses = ['ipaOverrideAnchor']
+    managed_permissions = {
+        'System: Read ID Overrides': {
+            'ipapermbindruletype': 'all',
+            'ipapermright': {'read', 'search', 'compare'},
+            'ipapermdefaultattr': {
+                'cn', 'objectClass', 'ipaAnchorUUID', 'uidNumber', 'gidNumber',
+                'description', 'homeDirectory', 'uid',
+            },
+        },
+    }
+
 
 @register()
 class idoverride_add(LDAPCreate):