diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2014-10-10 16:44:47 +0300 |
|---|---|---|
| committer | Petr Vobornik <pvoborni@redhat.com> | 2014-10-13 12:08:50 +0200 |
| commit | 5ec23ccb5f1d21c6e6c56650c18d1b4296d59ac9 (patch) | |
| tree | 4425113f4b723fa14c5a9ac9d51c92f2f76a1225 /ACI.txt | |
| parent | b50524b10c82ed7931a2e84dbb029e8909aa8f3f (diff) | |
| download | freeipa-5ec23ccb5f1d21c6e6c56650c18d1b4296d59ac9.tar.gz freeipa-5ec23ccb5f1d21c6e6c56650c18d1b4296d59ac9.tar.xz freeipa-5ec23ccb5f1d21c6e6c56650c18d1b4296d59ac9.zip | |
Allow override of gecos field in ID views
Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
Diffstat (limited to 'ACI.txt')
| -rw-r--r-- | ACI.txt | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -121,7 +121,7 @@ aci: (targetfilter = "(objectclass=ipahostgroup)")(version 3.0;acl "permission:S dn: cn=views,cn=accounts,dc=ipa,dc=example aci: (targetattr = "cn || createtimestamp || description || entryusn || gidnumber || ipaanchoruuid || modifytimestamp || objectclass")(targetfilter = "(objectclass=ipaGroupOverride)")(version 3.0;acl "permission:System: Read Group ID Overrides";allow (compare,read,search) userdn = "ldap:///all";) dn: cn=views,cn=accounts,dc=ipa,dc=example -aci: (targetattr = "createtimestamp || description || entryusn || homedirectory || ipaanchoruuid || ipaoriginaluid || loginshell || modifytimestamp || objectclass || uid || uidnumber")(targetfilter = "(objectclass=ipaUserOverride)")(version 3.0;acl "permission:System: Read User ID Overrides";allow (compare,read,search) userdn = "ldap:///all";) +aci: (targetattr = "createtimestamp || description || entryusn || gecos || homedirectory || ipaanchoruuid || ipaoriginaluid || loginshell || modifytimestamp || objectclass || uid || uidnumber")(targetfilter = "(objectclass=ipaUserOverride)")(version 3.0;acl "permission:System: Read User ID Overrides";allow (compare,read,search) userdn = "ldap:///all";) dn: cn=ranges,cn=etc,dc=ipa,dc=example aci: (targetattr = "cn || createtimestamp || entryusn || ipabaseid || ipabaserid || ipaidrangesize || ipanttrusteddomainsid || iparangetype || ipasecondarybaserid || modifytimestamp || objectclass")(targetfilter = "(objectclass=ipaidrange)")(version 3.0;acl "permission:System: Read ID Ranges";allow (compare,read,search) userdn = "ldap:///all";) dn: cn=views,cn=accounts,dc=ipa,dc=example |