IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-13 09:41:55 -06:00
Code Issues Packages Projects Releases Wiki Activity

Don't let a regular user edit their own active status or manager

Browse Source 
433384
This commit is contained in:
Rob Crittenden 2008-02-20 23:24:39 -05:00
parent 4bf136d95c
commit 4c588b3d5f
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ipa-server/ipa-gui/ipagui/templates/usereditform.kid
View File

@ -241,6 +241,9 @@ from ipagui.helpers import ipahelper
<span py:replace="user_fields.nsAccountLock.display(value_for(user_fields.nsAccountLock))" />
<span py:if="tg.errors.get('nsAccountLock')" class="fielderror"
py:content="tg.errors.get('nsAccountLock')" />
<script py:if="tg.identity.display_name == value.get('uid')" type="text/javascript">
document.getElementById('form_nsAccountLock').disabled = true;
</script>
</td>
</tr>
@ -712,7 +715,7 @@ from ipagui.helpers import ipahelper
<td valign="top">
<div>
<span id='manager_select_cn'>${value_for(user_fields.manager_cn)}</span>
<span id='manager_links'>
<span py:if="'editors' in tg.identity.groups or 'admins' in tg.identity.groups or tg.identity.display_name != value.get('uid')" id='manager_links'>
<a href="#" onclick="return clearSelect('manager');">clear</a>
<a href="#" onclick="return startSelect('manager');">change</a>
</span>