Permit reads to ipatokenRadiusProxyUser objects

This fixes an outstanding permissions issue from the OTP work.

https://fedorahosted.org/freeipa/ticket/3693
This commit is contained in:
Nathaniel McCallum
2013-07-11 12:39:27 +03:00
committed by Alexander Bokovoy
parent a209bb38aa
commit 4bbbc11029
2 changed files with 2 additions and 2 deletions
@@ -35,7 +35,7 @@ class update_anonymous_aci(PostUpdate):
aciname = u'Enable Anonymous access'
aciprefix = u'none'
ldap = self.obj.backend
targetfilter = '(&(!(objectClass=ipaToken))(!(objectClass=ipatokenTOTP))(!(objectClass=ipatokenRadiusProxyUser))(!(objectClass=ipatokenRadiusConfiguration)))'
targetfilter = '(&(!(objectClass=ipaToken))(!(objectClass=ipatokenTOTP))(!(objectClass=ipatokenRadiusConfiguration)))'
filter = None
(dn, entry_attrs) = ldap.get_entry(api.env.basedn, ['aci'])