freeipa/ipalib
Petr Viktorin 3db08227e8 Add support for managed permissions
This adds support for managed permissions. The attribute list
of these is computed from the "default" (modifiable only internally),
"allowed", and "excluded" lists. This makes it possible to cleanly
merge updated IPA defaults and user changes on upgrades.

The default managed permissions are to be added in a future patch.
For now they can only be created manually (see test_managed_permissions).

Tests included.

Part of the work for: https://fedorahosted.org/freeipa/ticket/4033
Design: http://www.freeipa.org/page/V3/Managed_Read_permissions
Reviewed-By: Martin Kosek <mkosek@redhat.com>
2014-02-12 17:11:17 +01:00
..
plugins Add support for managed permissions 2014-02-12 17:11:17 +01:00
__init__.py Add IntEnum parameter to ipalib 2013-10-09 18:05:37 +02:00
aci.py Remove some unused imports 2013-03-01 16:59:42 +01:00
backend.py Switch client to JSON-RPC 2013-11-26 16:59:59 +01:00
base.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
capabilities.py Rewrite the Permission plugin 2013-12-13 15:08:52 +01:00
cli.py cli.print_attribute: Convert values to strings 2014-01-03 14:11:33 +01:00
config.py Switch client to JSON-RPC 2013-11-26 16:59:59 +01:00
constants.py Increase service startup timeout default. 2014-01-17 10:12:04 +01:00
crud.py Add optional_create flag 2013-10-08 16:46:20 +02:00
errors.py Deprecate HBAC source hosts from CLI 2013-04-12 14:07:55 -04:00
frontend.py Switch client to JSON-RPC 2013-11-26 16:59:59 +01:00
krb_utils.py Pylint cleanup. 2013-01-29 15:39:49 +01:00
messages.py Add client capabilities, enable messages 2013-02-21 16:26:09 +01:00
output.py Typo fixes 2012-06-25 21:35:11 -04:00
parameters.py Add support for managed permissions 2014-02-12 17:11:17 +01:00
pkcs10.py Fix assorted bugs found by pylint 2011-01-25 14:01:36 -05:00
plugable.py Allow API plugin registration via a decorator 2013-08-14 12:08:27 +02:00
request.py Remove deprecated i18n code from ipalib/request and all references to it. 2011-03-01 10:31:36 -05:00
rpc.py ipa tool: Print the name of the server we are connecting to with -v 2014-02-05 15:35:36 +01:00
session.py Compliant client side session cookie behavior 2012-12-10 12:45:09 -05:00
text.py Add ConcatenatedLazyText object 2013-11-21 10:34:25 +01:00
util.py DNS classless support for reverse domains 2014-02-11 17:21:11 +01:00
x509.py Skip cert issuer validation in service and host commands in CA-less install. 2013-07-09 14:22:57 -04:00