summaryrefslogtreecommitdiffstats
path: root/ipalib/plugins
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2010-12-17 15:04:47 -0500
committerAdam Young <ayoung@redhat.com>2010-12-17 17:16:25 -0500
commit1207a7c83f89fccbd38c28e2c0c2307a55956a9d (patch)
tree0572b05bc80f2749847348e7d7578d574ba4dc09 /ipalib/plugins
parentb66c680f862e1dd2ff788ec593fb2f5dee7e43ab (diff)
downloadfreeipa-1207a7c83f89fccbd38c28e2c0c2307a55956a9d.tar.gz
freeipa-1207a7c83f89fccbd38c28e2c0c2307a55956a9d.tar.xz
freeipa-1207a7c83f89fccbd38c28e2c0c2307a55956a9d.zip
Fix the change_password permissions and the DNS access controls.
The change_password permission was too broad, limit it to users. The DNS access controls rolled everything into a single ACI. I broke it out into separate ACIs for add, delete and add. I also added a new dns type for the permission plugin. ticket 628
Diffstat (limited to 'ipalib/plugins')
-rw-r--r--ipalib/plugins/aci.py3
-rw-r--r--ipalib/plugins/permission.py2
2 files changed, 3 insertions, 2 deletions
diff --git a/ipalib/plugins/aci.py b/ipalib/plugins/aci.py
index 5a57a309..1dcba926 100644
--- a/ipalib/plugins/aci.py
+++ b/ipalib/plugins/aci.py
@@ -135,6 +135,7 @@ _type_map = {
'hostgroup': 'ldap:///cn=*,%s,%s' % (api.env.container_hostgroup, api.env.basedn),
'service': 'ldap:///krbprincipalname=*,%s,%s' % (api.env.container_service, api.env.basedn),
'netgroup': 'ldap:///ipauniqueid=*,%s,%s' % (api.env.container_netgroup, api.env.basedn),
+ 'dns': 'ldap:///idnsname=*,%s,%s' % (api.env.container_dns, api.env.basedn),
}
_valid_permissions_values = [
@@ -378,7 +379,7 @@ class aci(Object):
cli_name='type',
label=_('Type'),
doc=_('type of IPA object (user, group, host, hostgroup, service, netgroup)'),
- values=(u'user', u'group', u'host', u'service', u'hostgroup', u'netgroup'),
+ values=(u'user', u'group', u'host', u'service', u'hostgroup', u'netgroup', u'dns',),
),
Str('memberof?',
cli_name='memberof',
diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py
index 18dd577e..0587564e 100644
--- a/ipalib/plugins/permission.py
+++ b/ipalib/plugins/permission.py
@@ -120,7 +120,7 @@ class permission(LDAPObject):
cli_name='type',
label=_('Type'),
doc=_('Type of IPA object (user, group, host, hostgroup, service, netgroup)'),
- values=(u'user', u'group', u'host', u'service', u'hostgroup', u'netgroup'),
+ values=(u'user', u'group', u'host', u'service', u'hostgroup', u'netgroup', u'dns',),
),
Str('memberof?',
cli_name='memberof',