From 01929015e04688be073e129e47d789bb91186bac Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Mon, 6 Feb 2012 07:18:11 -0500 Subject: [PATCH] Switch --group and --membergroup in example for delegation The example mistakenly showed how to allow "employees" to edit addresses of "managers". This fixes the example by switching the two options. https://fedorahosted.org/freeipa/ticket/2317 --- ipalib/plugins/delegation.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ipalib/plugins/delegation.py b/ipalib/plugins/delegation.py index b707cd785..f602507bd 100644 --- a/ipalib/plugins/delegation.py +++ b/ipalib/plugins/delegation.py @@ -40,11 +40,11 @@ of attributes of members of another group. EXAMPLES: Add a delegation rule to allow managers to edit employee's addresses: - ipa delegation-add --attrs=street --membergroup=managers --group=employees "managers edit employees' street" + ipa delegation-add --attrs=street --group=managers --membergroup=employees "managers edit employees' street" When managing the list of attributes you need to include all attributes in the list, including existing ones. Add postalCode to the list: - ipa delegation-mod --attrs=street,postalCode --membergroup=managers --group=employees "managers edit employees' street" + ipa delegation-mod --attrs=street,postalCode --group=managers --membergroup=employees "managers edit employees' street" Display our updated rule: ipa delegation-show "managers edit employees' street"