IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

trusts: Allow reading system trust accounts by adtrust agents

Browse Source 
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
Tomas Babej
2014-06-24 18:24:32 +02:00
committed by Petr Viktorin
parent 8f9838c7ef
commit c2e6b74029
3 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
ipalib/plugins/trust.py
View File

@@ -330,6 +330,17 @@ class trust(LDAPObject):
'ipantsidblacklistincoming', 'ipantsidblacklistoutgoing'
},
},
'System: Read system trust accounts': {
'non_object': True,
'ipapermlocation': DN(container_dn, api.env.basedn),
'replaces_global_anonymous_aci': True,
'ipapermright': {'read', 'search', 'compare'},
'ipapermdefaultattr': {
'uidnumber', 'gidnumber', 'krbprincipalname'
},
'default_privileges': {'ADTrust Agents'},
},
}
label = _('Trusts')