Petr Viktorin fdef2e1bd8 permission plugin: Ignore unparseable ACIs ...

When manipulating a permission for an entry that has an ACI
that the parser cannot process, skip this ACI instead of
failing.

Add a test that manipulates permission in cn=accounts,
where there are complex ipaAllowedOperation-based ACIs.

Workaround for: https://fedorahosted.org/freeipa/ticket/4376

Reviewed-By: Martin Kosek <mkosek@redhat.com>

2014-07-01 09:35:38 +02:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

aci plugin: Fix internal error when ACIs are not readable

2014-05-29 16:22:37 +02:00

automember.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

automount.py

Add several CRUD default permissions

2014-06-24 13:53:41 +02:00

baseldap.py

sudorule: Refactor add and remove external_post_callback

2014-06-25 20:14:53 +02:00

batch.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

cert.py

Support requests with SAN in cert-request.

2014-06-24 12:10:01 +02:00

config.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

delegation.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

dns.py

Fix incompatible DNS permission

2014-06-25 18:31:27 +02:00

group.py

sudorule: Refactor add and remove external_post_callback

2014-06-25 20:14:53 +02:00

hbacrule.py

Convert HBAC Rule default permissions to managed

2014-06-24 13:53:40 +02:00

hbacsvc.py

Convert HBAC Service default permissions to managed

2014-06-24 13:53:40 +02:00

hbacsvcgroup.py

Convert HBAC Service Group default permissions to managed

2014-06-24 13:53:40 +02:00

hbactest.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

host.py

host permissions: Allow writing attributes needed for automatic enrollment

2014-06-23 12:44:33 +02:00

hostgroup.py

Convert Hostgroup default permissions to managed

2014-06-24 13:53:40 +02:00

idrange.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

internal.py

webui: support unlock user command

2014-06-30 13:11:53 +02:00

kerberos.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

krbtpolicy.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

migration.py

ipaplatform: Move all filesystem paths to ipaplatform.paths module

2014-06-16 19:48:20 +02:00

misc.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

netgroup.py

sudorule: Refactor add and remove external_post_callback

2014-06-25 20:14:53 +02:00

otptoken_yubikey.py

Add the otptoken-add-yubikey command

2014-06-26 16:10:16 +02:00

otptoken.py

Add otptoken-sync command

2014-06-26 16:15:18 +02:00

passwd.py

ipa-passwd: add OTP support

2014-06-26 12:37:38 +02:00

permission.py

permission plugin: Ignore unparseable ACIs

2014-07-01 09:35:38 +02:00

ping.py

Allow API plugin registration via a decorator

2013-08-14 12:08:27 +02:00

pkinit.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

privilege.py

Add several CRUD default permissions

2014-06-24 13:53:41 +02:00

pwpolicy.py

Convert Password Policy default permissions to managed

2014-06-18 14:56:43 +02:00

radiusproxy.py

Split long docstrings that were recently modified

2014-06-10 13:19:32 +02:00

realmdomains.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

role.py

Convert Role default permissions to managed

2014-06-24 13:53:40 +02:00

rpcclient.py

Switch client to JSON-RPC

2013-11-26 16:59:59 +01:00

selfservice.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

selinuxusermap.py

Convert SELinux User Map default permissions to managed

2014-06-24 13:53:41 +02:00

service.py

Let Host Administrators use host-disable command

2014-06-30 14:59:27 +02:00

sudocmd.py

Convert Sudo Command default permissions to managed

2014-06-24 13:53:41 +02:00

sudocmdgroup.py

Add several CRUD default permissions

2014-06-24 13:53:41 +02:00

sudorule.py

sudorule: Refactor add and remove external_post_callback

2014-06-25 20:14:53 +02:00

trust.py

trusts: Allow reading system trust accounts by adtrust agents

2014-06-25 15:01:52 +02:00

user.py

trusts: Allow reading ipaNTSecurityIdentifier in user and group objects

2014-06-23 15:27:33 +02:00

virtual.py

Internationalization for public errors

2012-09-03 18:16:12 +02:00