Commit Graph
3424 Commits
Author SHA1 Message Date
Martin Kosek 685c516e88 Permission rename test failing
This patch fixes test for Permission plugin - mainly permission-mod
part. Description field that the tests expected and which was
removed in ticket 792 was removed from the tests.

https://fedorahosted.org/freeipa/ticket/892
2011-02-01 15:43:12 -05:00
Adam Young ec59e618da use entity select widget for permissions
https://fedorahosted.org/freeipa/ticket/879
2011-02-01 14:56:41 -05:00
Simo Sorce 5c6232e24d Force sync in both direction before changing replication agreements
Fixes: https://fedorahosted.org/freeipa/ticket/887
2011-02-01 13:49:41 -05:00
Endi S. Dewata 8cff0812d5 Fixed attribute name for delegation member group. 2011-02-01 12:03:45 -05:00
Rob Crittenden 4b7e5721d4 Fix changing membergroup in a delegation.
This is mostly due to inconsistent option name usage but also due
to the aci plugin not always treating memberof as a special kind
of filter.

ticket 869
2011-02-01 11:59:24 -05:00
Endi S. Dewata 613a3d0f56 Added undo for permission rights.
https://fedorahosted.org/freeipa/ticket/884
2011-02-01 08:30:35 -05:00
Endi S. Dewata 7c23d5aff9 Fixed missing object reference. 2011-01-31 23:29:07 -05:00
Adam Young f85771b2a7 aci association fixes
declarative priv definition
fixes role_add_privilege and privilege_add_permisison
2011-01-31 23:09:13 -05:00
Jakub Hrozek 0dce1bc9e1 Add an address for a nameserver when a new zone is created during install
https://fedorahosted.org/freeipa/ticket/881
2011-01-31 22:15:45 -05:00
Adam Young a7e89190fa association fixes
PLaces custom association facets into the proper facet groups
usesthe associators if they are specifiedfor an association
2011-01-31 20:42:09 -05:00
Rob Crittenden 41abde2604 Fix privilege name we are assigning to DNS principal.
This fixes an installation failure.
2011-01-31 17:43:29 -05:00
Simo Sorce cc9abf5d38 Use a common group for all DS instances
Also remove the option to choose a user.
It is silly to keep it, when you can't choose the group nor the CA
directory user.

Fixes: https://fedorahosted.org/freeipa/ticket/851
2011-01-31 16:35:53 -05:00
Endi S. Dewata a629f3f4c7 Removed permission description from UI
https://fedorahosted.org/freeipa/ticket/877
2011-01-31 15:06:47 -05:00
Adam Young f89860b77e reduce scope of remove link it was global https://fedorahosted.org/freeipa/ticket/212 2011-01-31 14:31:44 -05:00
Rob Crittenden bf4f77d985 Rename permissions and privileges to be more readable.
This also drops description from permissions since it seems redundant and
fixes up the help text a little.

ticket 792
2011-01-31 13:17:38 -05:00
Adam Young c281e786c8 widget unit tests
unit test for basic functionality, text, and checkbox widgets
2011-01-31 13:12:53 -05:00
Jan Zeleny 6db3105315 Fixed permission lookup
Lookup based on --filter wasn't implemented at all. It did't show until
now, because of bug sitting on top of it which was resulting in internal
error. This patch fixes the bug and adds the filtering functionality.

https://fedorahosted.org/freeipa/ticket/818
2011-01-31 11:24:39 -05:00
Endi S. Dewata 987507efd0 Fixed IPA.widget's load, save, and is_dirty.
This patch fixes the problem leaving the user details page.
2011-01-30 15:32:59 -05:00
Adam Young de28abc236 delegation work around
Since the delegation enityt is using membergroup as the property name at this stage, we can use that as the value until the pluing is consistant
2011-01-29 23:16:08 -05:00
Endi S. Dewata f5e6d01916 Fixed permission reset and is_dirty unit test
The reset and is_dirty functionality for permission has been fixed.
New widgets have been created for select and a collection of checkboxes.
New test data files have been added for each target type.
2011-01-29 22:13:15 -05:00
Adam Young 20e742d355 populate attribute table for delegation add 2011-01-29 22:08:27 -05:00
Endi S. Dewata 8df5202940 Fixed permission reset and is_dirty.
The reset and is_dirty functionality for permission has been fixed.
New widgets have been created for select and a collection of checkboxes.
New test data files have been added for each target type.
2011-01-29 21:23:01 -05:00
Adam Young e633dd81dd placeholder function
ipa_target_section does not overload is_dirty, and it alwayrs returns true, meaning you can never leave the page once you visit it.

THis commit pushes a simple placeholder function that always returns fales.  Follow on work will be required to correctly inplement the is_dirty functonality
2011-01-29 14:24:00 -05:00
Endi S. Dewata e806f32cae Add permission dialog adjustments.
The IPA.dialog has been modified to support sections. The add
dialog for permission has been modified to include the target
section. The base dialog classes have been moved from widget.js
into a new file called dialog.js.

This patch also includes ayoung's fix for parameter name and
format for the permission attributes.

https://fedorahosted.org/freeipa/ticket/791
2011-01-29 13:36:03 -05:00
Martin Kosek f72d8e506a ipa permission-mod --rename does not work
This patch fixes nonfunctional rename operation in permission
plugin. Also makes sure, that no change is made to the underlying
ACI in pre_callback() when the target permission already exists.

Several tests for the rename operation have been created to ensure
that the it won't break again unnoticed.

https://fedorahosted.org/freeipa/ticket/814
2011-01-28 23:51:09 -05:00
Rob Crittenden 359d54e741 Don't perform some API self-tests in production mode for performance reasons
The API does a fair number of self tests and locking to assure that the
registered commands are consistent and will work. This does not need
to be done on a production system and adds additional overhead causing
somewhere between a 30 and 50% decrease in performance.

Because makeapi is executed when a build is done ensure that it is
executed in developer mode to ensure that the framework is ok.

ticket 751
2011-01-28 18:49:17 -05:00
Adam Young fd1d0857b5 unmatched aciattrs
instead of reporting an error on unmatched aciattrs, append them to the table.
2011-01-28 17:01:19 -05:00
Adam Young 3625a1e88a services list
Declaritive Service definition
Fixed a problem with multiple calls to create breaking the link between the select box and the text box
swapped the select and the text

https://fedorahosted.org/freeipa/ticket/442
2011-01-28 14:57:06 -05:00
Endi S. Dewata b96138ba56 Fixed delegation UI issues
This patch fixes several issues in delegation UI:

When adding a new delegation, only the first attribute selected
was saved. Now all attributes will be saved properly.

When loading the details page, the custom widgets did not store
the original values properly so is_dirty() did not work correctly.
Now this has been fixed except for the memberof attribute because
of these issues:
 - https://fedorahosted.org/freeipa/ticket/869
 - https://fedorahosted.org/freeipa/ticket/870

When saving the details page, the attrs were saved as an array
which was rejected by the server. Now it is stored as comma-
separated list.
2011-01-28 14:15:43 -05:00
Simo Sorce 4486341c83 Address entryusn initialization on replica installation
Fixes: https://fedorahosted.org/freeipa/ticket/637
2011-01-28 13:58:43 -05:00
Simo Sorce 86209d5248 Put some safeguards against misconfiguration on the kdc account
Ticket: https://fedorahosted.org/freeipa/ticket/862
2011-01-28 13:55:57 -05:00
Jakub Hrozek 18e9b7349c Fix delegation help 2011-01-28 11:44:38 -05:00
Jakub Hrozek a3a154d915 Fix filter_keys in ipa-getkeytab
https://fedorahosted.org/freeipa/ticket/723
2011-01-28 11:44:38 -05:00
Jakub Hrozek 92c57946e1 Fix API.txt 2011-01-28 11:44:38 -05:00
Jakub Hrozek 0a6b1c4bce Enforce that all NS records are resolvable
Bind cannot load a zone if any of its name server records is not
resolvable.

https://fedorahosted.org/freeipa/ticket/838
2011-01-28 11:44:38 -05:00
Jakub Hrozek 682ca8658a Add example of DNS SRV record and a simple validator
https://fedorahosted.org/freeipa/ticket/846
2011-01-28 11:44:38 -05:00
Jakub Hrozek a641f1f23d Delete the whole DNS record with no parameters
Error out when deleting a nonexistent DNS record

Also fixes the DNS unit tests.

https://fedorahosted.org/freeipa/ticket/816
https://fedorahosted.org/freeipa/ticket/829
2011-01-28 11:44:38 -05:00
Adam Young 828cd5f11a jsl warnings 2011-01-28 10:37:49 -05:00
Adam Young c75f332af9 aci rights widget
Fixes is_dirty and save

https://fedorahosted.org/freeipa/ticket/77
https://fedorahosted.org/freeipa/ticket/667
2011-01-28 10:37:49 -05:00
Adam Young ffcf10c832 default disable delete 2011-01-28 10:37:49 -05:00
Adam Young 114c238a9b entity filter text 2011-01-28 10:37:49 -05:00
Martin Kosek b9dbd693de modifyprivilegemembership permission has nestedgroup OC
modifyprivilegemembership permission object class in LDAP should be
groupofnames, not nestedgroup.

https://fedorahosted.org/freeipa/ticket/858
2011-01-28 10:28:37 -05:00
Jakub Hrozek 7a75464a30 host-add should not add a PTR record with --no-reverse
https://fedorahosted.org/freeipa/ticket/866
2011-01-28 10:24:41 -05:00
Jan Zeleny 884f43f0db Add support for account unlocking
This patch adds command ipa user-unlock and some LDAP modifications
which are required by Kerberos for unlocking to work.

Ticket:
https://fedorahosted.org/freeipa/ticket/344
2011-01-28 10:23:02 -05:00
Jr Aquino 7b04b2240b block anonymous access to sudo info https://fedorahosted.org/freeipa/ticket/865 2011-01-27 22:22:38 -05:00
Simo Sorce 3cb33d74ae Make sure all DS instances are managed by ipactl
Fixes: https://fedorahosted.org/freeipa/ticket/860
2011-01-27 17:49:30 -05:00
Rob Crittenden 878aa9ee1f Apply changes discovered in Fedora package review process (#672986)
Ticket 804
2011-01-27 17:09:19 -05:00
Adam Young d7f4d616df dirty
If a page is dirty, do not allow additional navigation until changes are saved or committed
https://fedorahosted.org/freeipa/ticket/726
2011-01-27 16:59:17 -05:00
Kyle Baker 7462a852bd Adjusted aci's target feilds, adjusted action panel styles, adjusted Delegation and Configuration. 2011-01-27 16:54:20 -05:00
Adam Young b1c4fc3e6d reset target section target section needed to cache results for use in results moved load logic into reset and load now calls reset 2011-01-27 16:53:02 -05:00