diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2014-09-30 15:44:31 +0300 |
|---|---|---|
| committer | Petr Vobornik <pvoborni@redhat.com> | 2014-10-13 12:08:50 +0200 |
| commit | 63be2ee9f0296e1366c77258929c7ce2dad53154 (patch) | |
| tree | 5cacce85daa739cdb7a9aed67c0ea9071881c574 /ACI.txt | |
| parent | 35c7bd05afd9b1c5d3f3b0049773535e65b8d080 (diff) | |
| download | freeipa-63be2ee9f0296e1366c77258929c7ce2dad53154.tar.gz freeipa-63be2ee9f0296e1366c77258929c7ce2dad53154.tar.xz freeipa-63be2ee9f0296e1366c77258929c7ce2dad53154.zip | |
Support overridding user shell in ID views
Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
Diffstat (limited to 'ACI.txt')
| -rw-r--r-- | ACI.txt | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -121,7 +121,7 @@ aci: (targetfilter = "(objectclass=ipahostgroup)")(version 3.0;acl "permission:S dn: cn=views,cn=accounts,dc=ipa,dc=example aci: (targetattr = "cn || createtimestamp || description || entryusn || gidnumber || ipaanchoruuid || modifytimestamp || objectclass")(targetfilter = "(objectclass=ipaGroupOverride)")(version 3.0;acl "permission:System: Read Group ID Overrides";allow (compare,read,search) userdn = "ldap:///all";) dn: cn=views,cn=accounts,dc=ipa,dc=example -aci: (targetattr = "createtimestamp || description || entryusn || homedirectory || ipaanchoruuid || ipaoriginaluid || modifytimestamp || objectclass || uid || uidnumber")(targetfilter = "(objectclass=ipaUserOverride)")(version 3.0;acl "permission:System: Read User ID Overrides";allow (compare,read,search) userdn = "ldap:///all";) +aci: (targetattr = "createtimestamp || description || entryusn || homedirectory || ipaanchoruuid || ipaoriginaluid || loginshell || modifytimestamp || objectclass || uid || uidnumber")(targetfilter = "(objectclass=ipaUserOverride)")(version 3.0;acl "permission:System: Read User ID Overrides";allow (compare,read,search) userdn = "ldap:///all";) dn: cn=ranges,cn=etc,dc=ipa,dc=example aci: (targetattr = "cn || createtimestamp || entryusn || ipabaseid || ipabaserid || ipaidrangesize || ipanttrusteddomainsid || iparangetype || ipasecondarybaserid || modifytimestamp || objectclass")(targetfilter = "(objectclass=ipaidrange)")(version 3.0;acl "permission:System: Read ID Ranges";allow (compare,read,search) userdn = "ldap:///all";) dn: cn=views,cn=accounts,dc=ipa,dc=example |