mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-09-03 20:52:56 -05:00
Use mixed-case for Read DNS Entries permission
https://fedorahosted.org/freeipa/ticket/2569
This commit is contained in:
committed by
Martin Kosek
parent
4d66cc07dc
commit
0423213148
@@ -4,7 +4,7 @@ objectClass: idnsConfigObject
|
||||
objectClass: nsContainer
|
||||
objectClass: top
|
||||
cn: dns
|
||||
aci: (targetattr = "*")(version 3.0; acl "No access to DNS tree without a permission"; deny (read,search,compare) (groupdn != "ldap:///cn=admins,cn=groups,cn=accounts,$SUFFIX") and (groupdn != "ldap:///cn=read dns entries,cn=permissions,cn=pbac,$SUFFIX");)
|
||||
aci: (targetattr = "*")(version 3.0; acl "No access to DNS tree without a permission"; deny (read,search,compare) (groupdn != "ldap:///cn=admins,cn=groups,cn=accounts,$SUFFIX") and (groupdn != "ldap:///cn=Read DNS Entries,cn=permissions,cn=pbac,$SUFFIX");)
|
||||
|
||||
dn: $SUFFIX
|
||||
changetype: modify
|
||||
@@ -57,12 +57,12 @@ description: Update DNS entries
|
||||
member: cn=DNS Administrators,cn=privileges,cn=pbac,$SUFFIX
|
||||
member: cn=DNS Servers,cn=privileges,cn=pbac,$SUFFIX
|
||||
|
||||
dn: cn=read dns entries,cn=permissions,cn=pbac,$SUFFIX
|
||||
dn: cn=Read DNS Entries,cn=permissions,cn=pbac,$SUFFIX
|
||||
changetype: add
|
||||
objectClass: top
|
||||
objectClass: groupofnames
|
||||
objectClass: ipapermission
|
||||
cn: read dns entries
|
||||
cn: Read DNS Entries
|
||||
description: Read DNS entries
|
||||
ipapermissiontype: SYSTEM
|
||||
member: cn=DNS Administrators,cn=privileges,cn=pbac,$SUFFIX
|
||||
|
||||
Reference in New Issue
Block a user