Commit Graph

3475 Commits

Author SHA1 Message Date
Rob Crittenden
c6ef39b2c0 Add new schema to store information about permissions.
There are some permissions we can't display because they are stored
outside of the basedn (such as the replication permissions). We
are adding a new attribute to store extra information to make this
clear, in this case SYSTEM.

ticket 853
2011-02-01 16:00:41 -05:00
Martin Kosek
685c516e88 Permission rename test failing
This patch fixes test for Permission plugin - mainly permission-mod
part. Description field that the tests expected and which was
removed in ticket 792 was removed from the tests.

https://fedorahosted.org/freeipa/ticket/892
2011-02-01 15:43:12 -05:00
Adam Young
ec59e618da use entity select widget for permissions
https://fedorahosted.org/freeipa/ticket/879
2011-02-01 14:56:41 -05:00
Simo Sorce
5c6232e24d Force sync in both direction before changing replication agreements
Fixes: https://fedorahosted.org/freeipa/ticket/887
2011-02-01 13:49:41 -05:00
Endi S. Dewata
8cff0812d5 Fixed attribute name for delegation member group. 2011-02-01 12:03:45 -05:00
Rob Crittenden
4b7e5721d4 Fix changing membergroup in a delegation.
This is mostly due to inconsistent option name usage but also due
to the aci plugin not always treating memberof as a special kind
of filter.

ticket 869
2011-02-01 11:59:24 -05:00
Endi S. Dewata
613a3d0f56 Added undo for permission rights.
https://fedorahosted.org/freeipa/ticket/884
2011-02-01 08:30:35 -05:00
Endi S. Dewata
7c23d5aff9 Fixed missing object reference. 2011-01-31 23:29:07 -05:00
Adam Young
f85771b2a7 aci association fixes
declarative priv definition
fixes role_add_privilege and privilege_add_permisison
2011-01-31 23:09:13 -05:00
Jakub Hrozek
0dce1bc9e1 Add an address for a nameserver when a new zone is created during install
https://fedorahosted.org/freeipa/ticket/881
2011-01-31 22:15:45 -05:00
Adam Young
a7e89190fa association fixes
PLaces custom association facets into the proper facet groups
usesthe associators if they are specifiedfor an association
2011-01-31 20:42:09 -05:00
Rob Crittenden
41abde2604 Fix privilege name we are assigning to DNS principal.
This fixes an installation failure.
2011-01-31 17:43:29 -05:00
Simo Sorce
cc9abf5d38 Use a common group for all DS instances
Also remove the option to choose a user.
It is silly to keep it, when you can't choose the group nor the CA
directory user.

Fixes: https://fedorahosted.org/freeipa/ticket/851
2011-01-31 16:35:53 -05:00
Endi S. Dewata
a629f3f4c7 Removed permission description from UI
https://fedorahosted.org/freeipa/ticket/877
2011-01-31 15:06:47 -05:00
Adam Young
f89860b77e reduce scope of remove link it was global https://fedorahosted.org/freeipa/ticket/212 2011-01-31 14:31:44 -05:00
Rob Crittenden
bf4f77d985 Rename permissions and privileges to be more readable.
This also drops description from permissions since it seems redundant and
fixes up the help text a little.

ticket 792
2011-01-31 13:17:38 -05:00
Adam Young
c281e786c8 widget unit tests
unit test for basic functionality, text, and checkbox widgets
2011-01-31 13:12:53 -05:00
Jan Zeleny
6db3105315 Fixed permission lookup
Lookup based on --filter wasn't implemented at all. It did't show until
now, because of bug sitting on top of it which was resulting in internal
error. This patch fixes the bug and adds the filtering functionality.

https://fedorahosted.org/freeipa/ticket/818
2011-01-31 11:24:39 -05:00
Endi S. Dewata
987507efd0 Fixed IPA.widget's load, save, and is_dirty.
This patch fixes the problem leaving the user details page.
2011-01-30 15:32:59 -05:00
Adam Young
de28abc236 delegation work around
Since the delegation enityt is using membergroup as the property name at this stage, we can use that as the value until the pluing is consistant
2011-01-29 23:16:08 -05:00
Endi S. Dewata
f5e6d01916 Fixed permission reset and is_dirty unit test
The reset and is_dirty functionality for permission has been fixed.
New widgets have been created for select and a collection of checkboxes.
New test data files have been added for each target type.
2011-01-29 22:13:15 -05:00
Adam Young
20e742d355 populate attribute table for delegation add 2011-01-29 22:08:27 -05:00
Endi S. Dewata
8df5202940 Fixed permission reset and is_dirty.
The reset and is_dirty functionality for permission has been fixed.
New widgets have been created for select and a collection of checkboxes.
New test data files have been added for each target type.
2011-01-29 21:23:01 -05:00
Adam Young
e633dd81dd placeholder function
ipa_target_section does not overload is_dirty, and it alwayrs returns true, meaning you can never leave the page once you visit it.

THis commit pushes a simple placeholder function that always returns fales.  Follow on work will be required to correctly inplement the is_dirty functonality
2011-01-29 14:24:00 -05:00
Endi S. Dewata
e806f32cae Add permission dialog adjustments.
The IPA.dialog has been modified to support sections. The add
dialog for permission has been modified to include the target
section. The base dialog classes have been moved from widget.js
into a new file called dialog.js.

This patch also includes ayoung's fix for parameter name and
format for the permission attributes.

https://fedorahosted.org/freeipa/ticket/791
2011-01-29 13:36:03 -05:00
Martin Kosek
f72d8e506a ipa permission-mod --rename does not work
This patch fixes nonfunctional rename operation in permission
plugin. Also makes sure, that no change is made to the underlying
ACI in pre_callback() when the target permission already exists.

Several tests for the rename operation have been created to ensure
that the it won't break again unnoticed.

https://fedorahosted.org/freeipa/ticket/814
2011-01-28 23:51:09 -05:00
Rob Crittenden
359d54e741 Don't perform some API self-tests in production mode for performance reasons
The API does a fair number of self tests and locking to assure that the
registered commands are consistent and will work. This does not need
to be done on a production system and adds additional overhead causing
somewhere between a 30 and 50% decrease in performance.

Because makeapi is executed when a build is done ensure that it is
executed in developer mode to ensure that the framework is ok.

ticket 751
2011-01-28 18:49:17 -05:00
Adam Young
fd1d0857b5 unmatched aciattrs
instead of reporting an error on unmatched aciattrs, append them to the table.
2011-01-28 17:01:19 -05:00
Adam Young
3625a1e88a services list
Declaritive Service definition
Fixed a problem with multiple calls to create breaking the link between the select box and the text box
swapped the select and the text

https://fedorahosted.org/freeipa/ticket/442
2011-01-28 14:57:06 -05:00
Endi S. Dewata
b96138ba56 Fixed delegation UI issues
This patch fixes several issues in delegation UI:

When adding a new delegation, only the first attribute selected
was saved. Now all attributes will be saved properly.

When loading the details page, the custom widgets did not store
the original values properly so is_dirty() did not work correctly.
Now this has been fixed except for the memberof attribute because
of these issues:
 - https://fedorahosted.org/freeipa/ticket/869
 - https://fedorahosted.org/freeipa/ticket/870

When saving the details page, the attrs were saved as an array
which was rejected by the server. Now it is stored as comma-
separated list.
2011-01-28 14:15:43 -05:00
Simo Sorce
4486341c83 Address entryusn initialization on replica installation
Fixes: https://fedorahosted.org/freeipa/ticket/637
2011-01-28 13:58:43 -05:00
Simo Sorce
86209d5248 Put some safeguards against misconfiguration on the kdc account
Ticket: https://fedorahosted.org/freeipa/ticket/862
2011-01-28 13:55:57 -05:00
Jakub Hrozek
18e9b7349c Fix delegation help 2011-01-28 11:44:38 -05:00
Jakub Hrozek
a3a154d915 Fix filter_keys in ipa-getkeytab
https://fedorahosted.org/freeipa/ticket/723
2011-01-28 11:44:38 -05:00
Jakub Hrozek
92c57946e1 Fix API.txt 2011-01-28 11:44:38 -05:00
Jakub Hrozek
0a6b1c4bce Enforce that all NS records are resolvable
Bind cannot load a zone if any of its name server records is not
resolvable.

https://fedorahosted.org/freeipa/ticket/838
2011-01-28 11:44:38 -05:00
Jakub Hrozek
682ca8658a Add example of DNS SRV record and a simple validator
https://fedorahosted.org/freeipa/ticket/846
2011-01-28 11:44:38 -05:00
Jakub Hrozek
a641f1f23d Delete the whole DNS record with no parameters
Error out when deleting a nonexistent DNS record

Also fixes the DNS unit tests.

https://fedorahosted.org/freeipa/ticket/816
https://fedorahosted.org/freeipa/ticket/829
2011-01-28 11:44:38 -05:00
Adam Young
828cd5f11a jsl warnings 2011-01-28 10:37:49 -05:00
Adam Young
c75f332af9 aci rights widget
Fixes is_dirty and save

https://fedorahosted.org/freeipa/ticket/77
https://fedorahosted.org/freeipa/ticket/667
2011-01-28 10:37:49 -05:00
Adam Young
ffcf10c832 default disable delete 2011-01-28 10:37:49 -05:00
Adam Young
114c238a9b entity filter text 2011-01-28 10:37:49 -05:00
Martin Kosek
b9dbd693de modifyprivilegemembership permission has nestedgroup OC
modifyprivilegemembership permission object class in LDAP should be
groupofnames, not nestedgroup.

https://fedorahosted.org/freeipa/ticket/858
2011-01-28 10:28:37 -05:00
Jakub Hrozek
7a75464a30 host-add should not add a PTR record with --no-reverse
https://fedorahosted.org/freeipa/ticket/866
2011-01-28 10:24:41 -05:00
Jan Zeleny
884f43f0db Add support for account unlocking
This patch adds command ipa user-unlock and some LDAP modifications
which are required by Kerberos for unlocking to work.

Ticket:
https://fedorahosted.org/freeipa/ticket/344
2011-01-28 10:23:02 -05:00
Jr Aquino
7b04b2240b block anonymous access to sudo info https://fedorahosted.org/freeipa/ticket/865 2011-01-27 22:22:38 -05:00
Simo Sorce
3cb33d74ae Make sure all DS instances are managed by ipactl
Fixes: https://fedorahosted.org/freeipa/ticket/860
2011-01-27 17:49:30 -05:00
Rob Crittenden
878aa9ee1f Apply changes discovered in Fedora package review process (#672986)
Ticket 804
2011-01-27 17:09:19 -05:00
Adam Young
d7f4d616df dirty
If a page is dirty, do not allow additional navigation until changes are saved or committed
https://fedorahosted.org/freeipa/ticket/726
2011-01-27 16:59:17 -05:00
Kyle Baker
7462a852bd Adjusted aci's target feilds, adjusted action panel styles, adjusted Delegation and Configuration. 2011-01-27 16:54:20 -05:00