IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add managed read permissions to realmdomains

Browse Source 
Part of the work for: https://fedorahosted.org/freeipa/ticket/3566

Reviewed-By: Martin Kosek <mkosek@redhat.com>
This commit is contained in:
Petr Viktorin 2014-03-26 17:11:23 +01:00 committed by Martin Kosek
parent a185d45d87
commit c97e1d96e3
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
ipalib/plugins/realmdomains.py
View File

@ -58,9 +58,20 @@ class realmdomains(LDAPObject):
List of domains associated with IPA realm. List of domains associated with IPA realm.
""" """
container_dn = api.env.container_realm_domains container_dn = api.env.container_realm_domains
permission_filter_objectclasses = ['domainrelatedobject']
object_name = _('Realm domains') object_name = _('Realm domains')
search_attributes = ['associateddomain'] search_attributes = ['associateddomain']
default_attributes = ['associateddomain'] default_attributes = ['associateddomain']
managed_permissions = {
'System: Read Realm Domains': {
'replaces_global_anonymous_aci': True,
'ipapermbindruletype': 'all',
'ipapermright': {'read', 'search', 'compare'},
'ipapermdefaultattr': {
'objectclass', 'cn', 'associateddomain',
},
},
}
label = _('Realm Domains') label = _('Realm Domains')
label_singular = _('Realm Domains') label_singular = _('Realm Domains')