Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/23/2010 04:32 PM, Simo Sorce wrote: On Tue, 23 Nov 2010 16:07:47 -0500 Rob Crittenden rcrit...@redhat.com wrote: I don't want to throw a wrench in, but what if you have multiple replicas in various distant locations, WHICH server is the

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Dmitri Pal
Stephen Gallagher wrote: On 11/23/2010 04:32 PM, Simo Sorce wrote: On Tue, 23 Nov 2010 16:07:47 -0500 Rob Crittenden rcrit...@redhat.com wrote: I don't want to throw a wrench in, but what if you have multiple replicas in various distant locations, WHICH server is the time relative to?

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Dmitri Pal
Duration New grammar allows DDHHMM for the duration. UI proposes to limit the duration to less than 24 hours since more than 24 hour windows can start overlapping and thus allowing to enter duration days was confusing to the users who tried the UI. We need to reconcile this a bit

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/24/2010 11:26 AM, Dmitri Pal wrote: Duration New grammar allows DDHHMM for the duration. UI proposes to limit the duration to less than 24 hours since more than 24 hour windows can start overlapping and thus allowing to enter duration

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/24/2010 11:15 AM, Dmitri Pal wrote: Stephen Gallagher wrote: On 11/23/2010 04:32 PM, Simo Sorce wrote: On Tue, 23 Nov 2010 16:07:47 -0500 Rob Crittenden rcrit...@redhat.com wrote: I don't want to throw a wrench in, but what if you have

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Simo Sorce
On Wed, 24 Nov 2010 11:26:05 -0500 Dmitri Pal d...@redhat.com wrote: Steven, please think about the case when the rule needs to be edited in UI and it has some value for DD - say 1. What you display in UI then? If you do not allow to enter days and you not allow more than 24 hours in the hour

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Dmitri Pal
Simo Sorce wrote: On Wed, 24 Nov 2010 11:26:05 -0500 Dmitri Pal d...@redhat.com wrote: Steven, please think about the case when the rule needs to be edited in UI and it has some value for DD - say 1. What you display in UI then? If you do not allow to enter days and you not allow more

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Simo Sorce
On Wed, 24 Nov 2010 13:12:02 -0500 Dmitri Pal d...@redhat.com wrote: Simo Sorce wrote: On Wed, 24 Nov 2010 11:26:05 -0500 Dmitri Pal d...@redhat.com wrote: Steven, please think about the case when the rule needs to be edited in UI and it has some value for DD - say 1. What you

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Dmitri Pal
I need to think a bit more but I think we may want to radically simplify the grammar instead by splitting single rules (as seen in the UI) in multiple values. And use additional attributes to aid the UI, like having a displayTZ attribute that tells the UI what is the preferred timezone to

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-23 Thread Rob Crittenden
Stephen Gallagher wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/22/2010 10:54 PM, Dmitri Pal wrote: Hi, During the conversation with Ben and Kyle today over the calendar screen two things came up: 1) Time zone 2) Duration Time zone snip Time zone should always be entered

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-23 Thread Simo Sorce
On Tue, 23 Nov 2010 16:07:47 -0500 Rob Crittenden rcrit...@redhat.com wrote: I don't want to throw a wrench in, but what if you have multiple replicas in various distant locations, WHICH server is the time relative to? By server I think Steve meant the machine currently evaluation the access