IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Provide attributelevelrights for the aci components in permission_show.

Browse Source 
Since the broken-out components are just part of the aci just copy right
access rights for aci.

ticket 943
This commit is contained in:
Rob Crittenden 2011-04-20 13:26:20 -04:00 committed by Martin Kosek
parent c31d7b9ad6
commit ccde115421
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ipalib/plugins/permission.py
View File

@ -339,7 +339,7 @@ class permission_mod(LDAPUpdate):
cn = options['rename'] # rename finished
result = self.api.Command.permission_show(cn)['result']
result = self.api.Command.permission_show(cn, **options)['result']
for r in result:
if not r.startswith('member'):
entry_attrs[r] = result[r]
@ -414,6 +414,11 @@ class permission_show(LDAPRetrieve):
entry_attrs[attr] = aci[attr]
except errors.NotFound:
self.debug('ACI not found for %s' % entry_attrs['cn'][0])
if options.get('rights', False) and options.get('all', False):
# The ACI attributes are just broken-out components of aci so
# the rights should all match it.
for attr in self.obj.aci_attributes:
entry_attrs['attributelevelrights'][attr] = entry_attrs['attributelevelrights']['aci']
return dn
api.register(permission_show)