public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,858 Commits 9 Branches 0 Tags
bb4e47d9ea249d7f3ead460284dd67312cc82bd5
Commit Graph
4 Commits
Author SHA1 Message Date
Petr Viktorin 41607774bc Add mechanism for adding default permissions to privileges 
Part of the work for: https://fedorahosted.org/freeipa/ticket/3566

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-04-10 14:49:16 +02:00
Petr Viktorin c58d6b2689 Allow overriding all attributes of default permissions 
Allow overriding ipapermtarget, ipapermtargetfilter, ipapermlocation,
objectclass of default managed permissions.
This allows defining permissions that are not tied to an object type.
Default values are same as before.

Also, do not reset ipapermbindruletype when updating an existing
managed permission.

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-04-09 13:40:42 +02:00
Petr Viktorin fb2f0ae8d5 Document the managed permission updater operation 
The method was explained on the [Design] page, but as the updater
is extended the design page would become obsolete.
Document the operation in the docstring of the plugin itself.

Design: http://www.freeipa.org/page/V3/Managed_Read_permissions#Default_Permission_Updater
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-04-09 13:40:42 +02:00
Petr Viktorin f4de4a2aa7 Add Object metadata and update plugin for managed permissions 
The default read permission is added for Netgroup as an example.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3566
Design: http://www.freeipa.org/page/V3/Managed_Read_permissions
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-03-25 14:18:12 +01:00