diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2007-11-14 10:49:03 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2007-11-14 10:49:03 -0500 |
| commit | 3e715a04cf95de0add2c37d6cd5985c43de47dab (patch) | |
| tree | e8b9120376bdd83285bfb9e86d9d2572742ed7a4 /ipa-server/ipa-gui/ipagui/subcontrollers/policy.py | |
| parent | 7502ebe47940e6a5deb03a5f47c10b512cea6d5d (diff) | |
| download | freeipa.git-3e715a04cf95de0add2c37d6cd5985c43de47dab.tar.gz freeipa.git-3e715a04cf95de0add2c37d6cd5985c43de47dab.tar.xz freeipa.git-3e715a04cf95de0add2c37d6cd5985c43de47dab.zip | |
Add an editors group. This is used to generally grant access for users
to edit other users (the Edit link won't appear otherwise). Additional
delegation is need to grant permission to individual attributes.
Update the failed login page to indicate that it is a permission issue.
Don't allow access to policy at all for non-admins.
By default users can only edit themselves.
Diffstat (limited to 'ipa-server/ipa-gui/ipagui/subcontrollers/policy.py')
| -rw-r--r-- | ipa-server/ipa-gui/ipagui/subcontrollers/policy.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ipa-server/ipa-gui/ipagui/subcontrollers/policy.py b/ipa-server/ipa-gui/ipagui/subcontrollers/policy.py index a9fd3271..1f2e4587 100644 --- a/ipa-server/ipa-gui/ipagui/subcontrollers/policy.py +++ b/ipa-server/ipa-gui/ipagui/subcontrollers/policy.py @@ -23,7 +23,7 @@ log = logging.getLogger(__name__) class PolicyController(IPAController): @expose("ipagui.templates.policyindex") - @identity.require(identity.not_anonymous()) + @identity.require(identity.in_group("admins")) def index(self, tg_errors=None): """Displays the one policy page""" |