A single permission granting anonymous read access covers
automountlocation, automountmap, and automountkey.
--
Petr³
From 76e983917332c2a8db89b944e2aab78ea14d5662 Mon Sep 17 00:00:00 2001
From: Petr Viktorin <pvikt...@redhat.com>
Date: Wed, 26 Mar 2014 17:11:23 +0100
Subject: [PATCH] Add managed read permission to automount
A single permission is added to cover automountlocation,
automountmap, and automountkey.
Part of the work for: https://fedorahosted.org/freeipa/ticket/3566
---
ipalib/plugins/automount.py | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/ipalib/plugins/automount.py b/ipalib/plugins/automount.py
index 4b94a595743229660e0bb996c453147b22139a37..b961b1c171102a8805afc4517f37ef0aece76ea2 100644
--- a/ipalib/plugins/automount.py
+++ b/ipalib/plugins/automount.py
@@ -208,6 +208,21 @@ class automountlocation(LDAPObject):
default_attributes = ['cn']
label = _('Automount Locations')
label_singular = _('Automount Location')
+ managed_permissions = {
+ 'System: Read Automount Configuration': {
+ # Single permission for all automount-related entries
+ 'non_object': True,
+ 'ipapermlocation': DN(container_dn, api.env.basedn),
+ 'replaces_global_anonymous_aci': True,
+ 'ipapermbindruletype': 'anonymous',
+ 'ipapermright': {'read', 'search', 'compare'},
+ 'ipapermdefaultattr': {
+ 'cn', 'objectclass',
+ 'automountinformation', 'automountkey', 'description',
+ 'automountmapname', 'description',
+ },
+ },
+ }
takes_params = (
Str('cn',
--
1.9.0
_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
