IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

webui: prohibit setting rid base with ipa-trust-ad-posix type

Browse Source 
Base RID is no longer editable for ipa-trust-ad-posix range type

Adder dialog:
- Range type selector was moved up because it affects a field above it

Details page:
- Only fields relevant to range's type are visible

https://fedorahosted.org/freeipa/ticket/4221

Reviewed-By: Tomas Babej <tbabej@redhat.com>
This commit is contained in:
Petr Vobornik 2014-09-03 17:23:33 +02:00 committed by Tomas Babej
parent 3d11de4849
commit 8248f69627
1 changed files with 60 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

75
install/ui/src/freeipa/idrange.js
View File

@ -53,6 +53,11 @@ return {
fields: [
'cn',
'iparangetype',
{
name: 'iparangetyperaw',
read_only: true,
visible: false
},
{
name: 'ipabaseid',
label: '@i18n:objects.idrange.ipabaseid',
@ -80,6 +85,9 @@ return {
}
]
}
],
policies: [
exp.idrange_policy
]
}
],
@ -88,21 +96,6 @@ return {
{
name: 'cn'
},
{
name: 'ipabaseid',
label: '@i18n:objects.idrange.ipabaseid',
title: '@mo-param:idrange:ipabaseid:label'
},
{
name: 'ipaidrangesize',
label: '@i18n:objects.idrange.ipaidrangesize',
title: '@mo-param:idrange:ipaidrangesize:label'
},
{
name: 'ipabaserid',
label: '@i18n:objects.idrange.ipabaserid',
title: '@mo-param:idrange:ipabaserid:label'
},
{
name: 'iparangetype',
$type: 'radio',
@ -124,6 +117,21 @@ return {
}
]
},
{
name: 'ipabaseid',
label: '@i18n:objects.idrange.ipabaseid',
title: '@mo-param:idrange:ipabaseid:label'
},
{
name: 'ipaidrangesize',
label: '@i18n:objects.idrange.ipaidrangesize',
title: '@mo-param:idrange:ipaidrangesize:label'
},
{
name: 'ipabaserid',
label: '@i18n:objects.idrange.ipabaserid',
title: '@mo-param:idrange:ipabaserid:label'
},
{
name: 'ipasecondarybaserid',
label: '@i18n:objects.idrange.ipasecondarybaserid',
@ -147,7 +155,9 @@ IPA.idrange_adder_policy = function(spec) {
The logic for enabling/requiring ipabaserid, ipasecondarybaserid and
ipanttrusteddomainsid is as follows:
1) for AD ranges (range type is ipa-ad-trust or ipa-ad-trust-posix):
* ipabaserid and ipanttrusteddomainsid are requred
* ipanttrusteddomainsid is required
* ipabaserid is required for ipa-ad-trust but disabled for
ipa-ad-trust-posix
* ipasecondarybaserid is disabled
2) for local ranges
* ipanttrusteddomainsid is disabled
@ -206,7 +216,11 @@ IPA.idrange_adder_policy = function(spec) {
var is_ad_range = (type_v === 'ipa-ad-trust' || type_v === 'ipa-ad-trust-posix');
if (is_ad_range) {
if (type_v === 'ipa-ad-trust') {
require(baserid_f);
} else {
disable(baserid_f);
}
require(trusteddomainsid_f);
disable(secondarybaserid_f);
} else {
@ -230,6 +244,35 @@ IPA.idrange_adder_policy = function(spec) {
return that;
};
exp.idrange_policy = function(spec) {
spec = spec || {};
var that = IPA.facet_policy(spec);
that.post_load = function() {
var type_f = that.container.fields.get_field('iparangetyperaw');
var widgets = that.container.widgets;
var type_v = type_f.get_value()[0];
var baserid = true;
var secrid = true;
var sid = true;
if (type_v === 'ipa-local') {
sid = false;
} else if (type_v === 'ipa-ad-trust-posix') {
baserid = secrid = false;
} else if (type_v === 'ipa-ad-trust') {
secrid = false;
}
widgets.get_widget('details.ipabaserid').set_visible(baserid);
widgets.get_widget('details.ipasecondarybaserid').set_visible(secrid);
widgets.get_widget('details.ipanttrusteddomainsid').set_visible(sid);
};
return that;
};
exp.entity_spec = make_spec();
exp.register = function() {
var e = reg.entity;