Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-06 Thread Petr Viktorin
On 12/02/2013 02:48 PM, Petr Viktorin wrote: On 12/02/2013 02:29 PM, Simo Sorce wrote: On Fri, 2013-11-29 at 16:51 +0100, Petr Viktorin wrote: I've updated the design with - updated schema (this time the OIDs are even reserved properly!) - longer attribute descriptions with examples - updated

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-06 Thread Simo Sorce
On Fri, 2013-12-06 at 14:14 +0100, Petr Viktorin wrote: On 12/02/2013 02:48 PM, Petr Viktorin wrote: On 12/02/2013 02:29 PM, Simo Sorce wrote: It would be very nice if you can add the resulting LDAP objects in the example, that will allow me to reason on the correctness of the

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-06 Thread Petr Viktorin
On 12/06/2013 03:28 PM, Simo Sorce wrote: On Fri, 2013-12-06 at 14:14 +0100, Petr Viktorin wrote: On 12/02/2013 02:48 PM, Petr Viktorin wrote: On 12/02/2013 02:29 PM, Simo Sorce wrote: It would be very nice if you can add the resulting LDAP objects in the example, that will allow me to

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-06 Thread Simo Sorce
On Fri, 2013-12-06 at 15:46 +0100, Petr Viktorin wrote: On 12/06/2013 03:28 PM, Simo Sorce wrote: On Fri, 2013-12-06 at 14:14 +0100, Petr Viktorin wrote: On 12/02/2013 02:48 PM, Petr Viktorin wrote: On 12/02/2013 02:29 PM, Simo Sorce wrote: It would be very nice if you can add the

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-06 Thread Rob Crittenden
Simo Sorce wrote: On Fri, 2013-12-06 at 15:46 +0100, Petr Viktorin wrote: On 12/06/2013 03:28 PM, Simo Sorce wrote: On Fri, 2013-12-06 at 14:14 +0100, Petr Viktorin wrote: On 12/02/2013 02:48 PM, Petr Viktorin wrote: On 12/02/2013 02:29 PM, Simo Sorce wrote: It would be very nice if you

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-06 Thread Petr Viktorin
On 12/06/2013 03:49 PM, Simo Sorce wrote: On Fri, 2013-12-06 at 15:46 +0100, Petr Viktorin wrote: On 12/06/2013 03:28 PM, Simo Sorce wrote: On Fri, 2013-12-06 at 14:14 +0100, Petr Viktorin wrote: On 12/02/2013 02:48 PM, Petr Viktorin wrote: On 12/02/2013 02:29 PM, Simo Sorce wrote: It

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-06 Thread Martin Kosek
On 12/06/2013 03:28 PM, Simo Sorce wrote: On Fri, 2013-12-06 at 14:14 +0100, Petr Viktorin wrote: On 12/02/2013 02:48 PM, Petr Viktorin wrote: On 12/02/2013 02:29 PM, Simo Sorce wrote: It would be very nice if you can add the resulting LDAP objects in the example, that will allow me to

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-06 Thread Petr Viktorin
On 12/06/2013 03:54 PM, Rob Crittenden wrote: Simo Sorce wrote: On Fri, 2013-12-06 at 15:46 +0100, Petr Viktorin wrote: On 12/06/2013 03:28 PM, Simo Sorce wrote: On Fri, 2013-12-06 at 14:14 +0100, Petr Viktorin wrote: On 12/02/2013 02:48 PM, Petr Viktorin wrote: On 12/02/2013 02:29 PM, Simo

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-06 Thread Simo Sorce
On Fri, 2013-12-06 at 16:02 +0100, Petr Viktorin wrote: On 12/06/2013 03:49 PM, Simo Sorce wrote: On Fri, 2013-12-06 at 15:46 +0100, Petr Viktorin wrote: On 12/06/2013 03:28 PM, Simo Sorce wrote: On Fri, 2013-12-06 at 14:14 +0100, Petr Viktorin wrote: On 12/02/2013 02:48 PM, Petr Viktorin

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-02 Thread Simo Sorce
On Fri, 2013-11-29 at 16:51 +0100, Petr Viktorin wrote: I've updated the design with - updated schema (this time the OIDs are even reserved properly!) - longer attribute descriptions with examples - updated update algorithm based on discussion with Simo Hi Petr, thank you for the update.

Re: [Freeipa-devel] [RFE] Permissions V2

2013-12-02 Thread Petr Viktorin
On 12/02/2013 02:29 PM, Simo Sorce wrote: On Fri, 2013-11-29 at 16:51 +0100, Petr Viktorin wrote: I've updated the design with - updated schema (this time the OIDs are even reserved properly!) - longer attribute descriptions with examples - updated update algorithm based on discussion with

Re: [Freeipa-devel] [RFE] Permissions V2

2013-11-29 Thread Petr Viktorin
On 11/11/2013 04:48 PM, Petr Viktorin wrote: On 11/11/2013 03:56 PM, Rob Crittenden wrote: Petr Viktorin wrote: Hello, I'm splitting up ACI work into several designs to make it more manageable. This one is about - Moving ACIs out of $SUFFIX - Storing all ACI data in the permission entry -

Re: [Freeipa-devel] [RFE] Permissions V2

2013-11-11 Thread Rob Crittenden
Petr Viktorin wrote: Hello, I'm splitting up ACI work into several designs to make it more manageable. This one is about - Moving ACIs out of $SUFFIX - Storing all ACI data in the permission entry - Permission flag system for ensuring backwards compatibility Summary of the backcompat story: -

Re: [Freeipa-devel] [RFE] Permissions V2

2013-11-11 Thread Petr Viktorin
On 11/11/2013 03:56 PM, Rob Crittenden wrote: Petr Viktorin wrote: Hello, I'm splitting up ACI work into several designs to make it more manageable. This one is about - Moving ACIs out of $SUFFIX - Storing all ACI data in the permission entry - Permission flag system for ensuring backwards

[Freeipa-devel] [RFE] Permissions V2

2013-11-07 Thread Petr Viktorin
Hello, I'm splitting up ACI work into several designs to make it more manageable. This one is about - Moving ACIs out of $SUFFIX - Storing all ACI data in the permission entry - Permission flag system for ensuring backwards compatibility Summary of the backcompat story: - Attributes, rights,