From 2f3cdba54620989afba0ce1b423cddb56b841ab3 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Mon, 9 Jun 2014 17:59:53 +0200 Subject: Make 'permission' the default bind type for managed permissions This reduces typing (or copy/pasting), and draws a bit of attention to any non-default privileges (currently 'any' or 'anonymous'). Leaving the bindtype out by mistake isn't dangerous: by default a permission is not granted to anyone, since it is not included in any priviliges. Reviewed-By: Martin Kosek --- ipalib/plugins/automember.py | 3 --- 1 file changed, 3 deletions(-) (limited to 'ipalib/plugins/automember.py') diff --git a/ipalib/plugins/automember.py b/ipalib/plugins/automember.py index ddcd5210c..0f4739316 100644 --- a/ipalib/plugins/automember.py +++ b/ipalib/plugins/automember.py @@ -199,7 +199,6 @@ class automember(LDAPObject): 'ipapermlocation': DN(container_dn, api.env.basedn), 'ipapermtargetfilter': {'(objectclass=automemberdefinition)'}, 'replaces_global_anonymous_aci': True, - 'ipapermbindruletype': 'permission', 'ipapermright': {'read', 'search', 'compare'}, 'ipapermdefaultattr': { 'objectclass', 'cn', 'automemberscope', 'automemberfilter', @@ -211,7 +210,6 @@ class automember(LDAPObject): }, 'System: Read Automember Rules': { 'replaces_global_anonymous_aci': True, - 'ipapermbindruletype': 'permission', 'ipapermright': {'read', 'search', 'compare'}, 'ipapermdefaultattr': { 'cn', 'objectclass', 'automembertargetgroup', 'description', @@ -225,7 +223,6 @@ class automember(LDAPObject): 'ipapermlocation': DN('cn=tasks', 'cn=config'), 'ipapermtarget': DN('cn=*', REBUILD_TASK_CONTAINER), 'replaces_global_anonymous_aci': True, - 'ipapermbindruletype': 'permission', 'ipapermright': {'read', 'search', 'compare'}, 'ipapermdefaultattr': {'*'}, 'default_privileges': {'Automember Task Administrator'}, -- cgit