From 49e45f28a2b4a3b2c02bff32c24d9ffb8ef7dfc0 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Wed, 26 Mar 2014 15:17:34 +0100 Subject: Add managed read permissions to group Part of the work for: https://fedorahosted.org/freeipa/ticket/3566 Reviewed-By: Martin Kosek --- ipalib/plugins/group.py | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) (limited to 'ipalib/plugins/group.py') diff --git a/ipalib/plugins/group.py b/ipalib/plugins/group.py index 318f0746a..644954d94 100644 --- a/ipalib/plugins/group.py +++ b/ipalib/plugins/group.py @@ -137,6 +137,26 @@ class group(LDAPObject): 'sudorule'], } rdn_is_primary_key = True + managed_permissions = { + 'System: Read Groups': { + 'replaces_global_anonymous_aci': True, + 'ipapermbindruletype': 'anonymous', + 'ipapermright': {'read', 'search', 'compare'}, + 'ipapermdefaultattr': { + 'businesscategory', 'cn', 'description', 'gidnumber', + 'ipaexternalmember', 'ipauniqueid', 'mepmanagedby', 'o', + 'objectclass', 'ou', 'owner', 'seealso', + }, + }, + 'System: Read Group Membership': { + 'replaces_global_anonymous_aci': True, + 'ipapermbindruletype': 'all', + 'ipapermright': {'read', 'search', 'compare'}, + 'ipapermdefaultattr': { + 'member', 'memberof', 'memberuid', + }, + }, + } label = _('User Groups') label_singular = _('User Group') -- cgit