Petr Viktorin b6258d08d6 Make sure member* attrs are always granted together in read permissions ...

Memberofindirect processing of an entry doesn't work if the user doesn't
have rights to any one of these attributes:
- member
- memberuser
- memberhost

Add all of these to any read permission that specifies any of them.

Add a check to makeaci that will enforce this for any future permissions.

Reviewed-By: Martin Kosek <mkosek@redhat.com>

2014-06-11 13:21:30 +02:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

aci plugin: Fix internal error when ACIs are not readable

2014-05-29 16:22:37 +02:00

automember.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

automount.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

baseldap.py

get_ancestors_primary_keys clone

2014-06-03 15:55:32 +02:00

batch.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

cert.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

config.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

delegation.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

dns.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

group.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

hbacrule.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

hbacsvc.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

hbacsvcgroup.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

hbactest.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

host.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

hostgroup.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

idrange.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

internal.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

kerberos.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

krbtpolicy.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

migration.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

misc.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

netgroup.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

otptoken.py

Split long docstrings that were recently modified

2014-06-10 13:19:32 +02:00

passwd.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

permission.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

ping.py

Allow API plugin registration via a decorator

2013-08-14 12:08:27 +02:00

pkinit.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

privilege.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

pwpolicy.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

radiusproxy.py

Split long docstrings that were recently modified

2014-06-10 13:19:32 +02:00

realmdomains.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

role.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

rpcclient.py

Switch client to JSON-RPC

2013-11-26 16:59:59 +01:00

selfservice.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

selinuxusermap.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

service.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

sudocmd.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

sudocmdgroup.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

sudorule.py

Make sure member* attrs are always granted together in read permissions

2014-06-11 13:21:30 +02:00

trust.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

user.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

virtual.py

Internationalization for public errors

2012-09-03 18:16:12 +02:00