Endi S. Dewata
8d9575605d
A new attribute label_singular has been added to all entities which contains the singular form of the entity label in lower cases except for acronyms (e.g. HBAC) or proper nouns (e.g. Kerberos). In the Web UI, this label can be capitalized using CSS text-transform. The existing 'label' attribute is intentionally left unchanged due to inconsistencies in the current values. It contains mostly the plural form of capitalized entity label, but some are singular. Also, it seems currently there is no comparable capitalization method on the server-side. So more work is needed before the label can be changed. Ticket #1249
142 lines
3.4 KiB
Python
142 lines
3.4 KiB
Python
# Authors:
|
|
# Jr Aquino <jr.aquino@citrixonline.com>
|
|
#
|
|
# Copyright (C) 2010 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
"""
|
|
Sudo Commands
|
|
|
|
Commands used as building blocks for sudo
|
|
|
|
EXAMPLES:
|
|
|
|
Create a new command
|
|
ipa sudocmd-add --desc='For reading log files' /usr/bin/less
|
|
|
|
Remove a command
|
|
ipa sudocmd-del /usr/bin/less
|
|
|
|
"""
|
|
|
|
import platform
|
|
import os
|
|
import sys
|
|
|
|
from ipalib import api, errors, util
|
|
from ipalib import Str
|
|
from ipalib.plugins.baseldap import *
|
|
from ipalib import _, ngettext
|
|
|
|
topic = ('sudo', 'commands for controlling sudo configuration')
|
|
|
|
class sudocmd(LDAPObject):
|
|
"""
|
|
Sudo Command object.
|
|
"""
|
|
container_dn = api.env.container_sudocmd
|
|
object_name = 'sudocmd'
|
|
object_name_plural = 'sudocmds'
|
|
object_class = ['ipaobject', 'ipasudocmd']
|
|
# object_class_config = 'ipahostobjectclasses'
|
|
search_attributes = [
|
|
'sudocmd', 'description',
|
|
]
|
|
default_attributes = [
|
|
'sudocmd', 'description', 'memberof',
|
|
]
|
|
attribute_members = {
|
|
'memberof': ['sudocmdgroup'],
|
|
}
|
|
uuid_attribute = 'ipauniqueid'
|
|
label = _('Sudo Commands')
|
|
label_singular = _('sudo command')
|
|
|
|
takes_params = (
|
|
Str('sudocmd',
|
|
cli_name='command',
|
|
label=_('Sudo Command'),
|
|
primary_key=True,
|
|
),
|
|
Str('description?',
|
|
cli_name='desc',
|
|
label=_('Description'),
|
|
doc=_('A description of this command'),
|
|
),
|
|
)
|
|
|
|
def get_dn(self, *keys, **options):
|
|
if keys[-1].endswith('.'):
|
|
keys[-1] = keys[-1][:-1]
|
|
dn = super(sudocmd, self).get_dn(*keys, **options)
|
|
try:
|
|
self.backend.get_entry(dn, [''])
|
|
except errors.NotFound:
|
|
try:
|
|
(dn, entry_attrs) = self.backend.find_entry_by_attr(
|
|
'sudocmd', keys[-1], self.object_class, [''],
|
|
self.container_dn
|
|
)
|
|
except errors.NotFound:
|
|
pass
|
|
return dn
|
|
|
|
api.register(sudocmd)
|
|
|
|
class sudocmd_add(LDAPCreate):
|
|
"""
|
|
Create new sudo command.
|
|
"""
|
|
|
|
msg_summary = _('Added sudo command "%(value)s"')
|
|
|
|
api.register(sudocmd_add)
|
|
|
|
class sudocmd_del(LDAPDelete):
|
|
"""
|
|
Delete sudo command.
|
|
"""
|
|
|
|
msg_summary = _('Deleted sudo command "%(value)s"')
|
|
|
|
api.register(sudocmd_del)
|
|
|
|
class sudocmd_mod(LDAPUpdate):
|
|
"""
|
|
Modify command.
|
|
"""
|
|
|
|
msg_summary = _('Modified sudo command "%(value)s"')
|
|
|
|
api.register(sudocmd_mod)
|
|
|
|
class sudocmd_find(LDAPSearch):
|
|
"""
|
|
Search for commands.
|
|
"""
|
|
|
|
msg_summary = ngettext(
|
|
'%(count)d sudo command matched', '%(count)d sudo command matched', 0
|
|
)
|
|
|
|
api.register(sudocmd_find)
|
|
|
|
class sudocmd_show(LDAPRetrieve):
|
|
"""
|
|
Display sudo command.
|
|
"""
|
|
|
|
api.register(sudocmd_show)
|