diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2007-11-14 10:49:03 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2007-11-14 10:49:03 -0500 |
| commit | 3e715a04cf95de0add2c37d6cd5985c43de47dab (patch) | |
| tree | e8b9120376bdd83285bfb9e86d9d2572742ed7a4 /ipa-server/ipa-gui/ipagui/subcontrollers/group.py | |
| parent | 7502ebe47940e6a5deb03a5f47c10b512cea6d5d (diff) | |
| download | freeipa.git-3e715a04cf95de0add2c37d6cd5985c43de47dab.tar.gz freeipa.git-3e715a04cf95de0add2c37d6cd5985c43de47dab.tar.xz freeipa.git-3e715a04cf95de0add2c37d6cd5985c43de47dab.zip | |
Add an editors group. This is used to generally grant access for users
to edit other users (the Edit link won't appear otherwise). Additional
delegation is need to grant permission to individual attributes.
Update the failed login page to indicate that it is a permission issue.
Don't allow access to policy at all for non-admins.
By default users can only edit themselves.
Diffstat (limited to 'ipa-server/ipa-gui/ipagui/subcontrollers/group.py')
| -rw-r--r-- | ipa-server/ipa-gui/ipagui/subcontrollers/group.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ipa-server/ipa-gui/ipagui/subcontrollers/group.py b/ipa-server/ipa-gui/ipagui/subcontrollers/group.py index b412b6d1..0df2d3c8 100644 --- a/ipa-server/ipa-gui/ipagui/subcontrollers/group.py +++ b/ipa-server/ipa-gui/ipagui/subcontrollers/group.py @@ -168,7 +168,7 @@ class GroupController(IPAController): @expose("ipagui.templates.groupedit") - @identity.require(identity.not_anonymous()) + @identity.require(identity.in_group("admins")) def edit(self, cn, tg_errors=None): """Displays the edit group form""" if tg_errors: @@ -214,7 +214,7 @@ class GroupController(IPAController): raise turbogears.redirect('/group/show', uid=cn) @expose() - @identity.require(identity.not_anonymous()) + @identity.require(identity.in_group("admins")) def update(self, **kw): """Updates an existing group""" self.restrict_post() |