Martin Kosek wrote:
On Thu, 2012-01-12 at 22:47 -0500, Rob Crittenden wrote:
Martin Kosek wrote:
On Fri, 2011-12-09 at 19:33 -0600, Endi Sukma Dewata wrote:
On 12/9/2011 9:47 AM, Martin Kosek wrote:
pkey-only functionality has to be implemented separately for these
modules as they are based on crud.Search instead of standard
LDAPSearch.

Delegation commands were modified in the process to allow ACIs
without 'memberof' as delegation ACIs. This check is no longer
needed since delegation ACI prefixe ensures the ACI type.

https://fedorahosted.org/freeipa/ticket/2092

     From UI perspective this is ACKed. I'm sending a patch to enable paging
on these pages.


Thanks for the UI review Endi. If there are no objections from server
people too we can push this.

A rebased version for current master is attached.

Martin

The delegation tests fail with creation. Here is what it looks like from
the cli.

# ipa delegation-add --attrs=street,c,l,st,postalcode --group=editors
--permissions=write --membergroup=admins delegation1
ipa: ERROR: Delegation 'delegation1' not found

rob

In this case, delegation was broken earlier in a recent patch "Display
the value of memberOf ACIs in permission plugin".

A new version of the patch #180 adding the --pkey-only option + fixing
the delegation plugin is attached. Delegation plugin is pretty simple
and straightforward after this patch.

Martin

ACK

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to