Fraser Tweedale 6fa14fd21e Add permission for bypassing CA ACL enforcement ...

Add the "Request Certificate ignoring CA ACLs" permission and
associated ACI, initially assigned to "Certificate Administrators"
privilege.

Update cert-request command to skip CA ACL enforcement when the bind
principal has this permission.

Fixes: https://fedorahosted.org/freeipa/ticket/5099
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

2015-08-14 14:02:05 +02:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

automember.py

Fix error message for nonexistent members and add tests.

2014-11-24 16:04:57 +01:00

automount.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

baseldap.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

baseuser.py

store certificates issued for user entries as userCertificate;binary

2015-08-04 13:57:33 +02:00

batch.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

caacl.py

caacl: fix incorrect construction of HbacRequest for hosts

2015-07-08 17:13:25 +02:00

cert.py

Add permission for bypassing CA ACL enforcement

2015-08-14 14:02:05 +02:00

certprofile.py

certprofile: add profile format explanation

2015-08-12 18:24:34 +02:00

config.py

Expose the disabled User Auth Type

2015-02-12 10:31:24 +01:00

delegation.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

dns.py

Modernize function and method attribute names

2015-08-12 18:17:23 +02:00

domainlevel.py

domainlevel: Fix incorrect initializations of InvalidDomainLevelError exceptions

2015-07-20 13:53:21 +02:00

group.py

Modernize function and method attribute names

2015-08-12 18:17:23 +02:00

hbacrule.py

fix hbac rule search for non-admin users

2015-07-16 15:37:24 +02:00

hbacsvc.py

Convert HBAC Service default permissions to managed

2014-06-24 13:53:40 +02:00

hbacsvcgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

hbactest.py

Remove tuple unpacking from except clause ipalib/plugins/hbactest.py

2015-07-14 13:43:50 +02:00

host.py

Import 'reduce' from functools

2015-08-12 18:17:23 +02:00

hostgroup.py

adjust search so that it works for non-admin users

2015-08-12 16:14:21 +02:00

idrange.py

idranges: raise an error when local IPA ID range is being modified

2015-08-12 16:38:27 +02:00

idviews.py

idviews: Enforce objectclass check in idoverride*-del

2015-07-23 15:37:01 +02:00

internal.py

webui: add LDAP vs Kerberos behavior description to user auth types

2015-08-10 14:54:16 +02:00

kerberos.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

krbtpolicy.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

migration.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

misc.py

plugable: Pass API to plugins on initialization rather than using set_api

2015-07-01 13:05:30 +00:00

netgroup.py

adjust search so that it works for non-admin users

2015-08-12 16:14:21 +02:00

otpconfig.py

Fix TOTP Synchronization Window label

2015-02-17 08:26:42 +01:00

otptoken_yubikey.py

Create an OTP help topic

2014-12-05 13:44:51 +01:00

otptoken.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

passwd.py

ipa-passwd: add OTP support

2014-06-26 12:37:38 +02:00

permission.py

Modernize function and method attribute names

2015-08-12 18:17:23 +02:00

ping.py

Allow API plugin registration via a decorator

2013-08-14 12:08:27 +02:00

pkinit.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

privilege.py

Validate adding privilege to a permission

2015-07-17 04:57:54 +00:00

pwpolicy.py

Modernize function and method attribute names

2015-08-12 18:17:23 +02:00

radiusproxy.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

realmdomains.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

role.py

speed up indirect member processing

2015-04-27 05:55:04 +00:00

rpcclient.py

Switch client to JSON-RPC

2013-11-26 16:59:59 +01:00

selfservice.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

selinuxusermap.py

fix selinuxusermap search for non-admin users

2015-07-16 15:38:47 +02:00

server.py

adjust search so that it works for non-admin users

2015-08-12 16:14:21 +02:00

service.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

servicedelegation.py

Fix minor typos

2015-07-17 14:33:30 +02:00

session.py

do not import memcache on client

2015-07-16 11:23:40 +02:00

stageuser.py

ULC: Fix stageused-add --from-delete command

2015-07-29 17:06:54 +02:00

sudocmd.py

Convert Sudo Command default permissions to managed

2014-06-24 13:53:41 +02:00

sudocmdgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

sudorule.py

Sudorule RunAsUser should work with external groups

2014-10-02 11:06:47 +02:00

topology.py

domainlevel: Fix incorrect initializations of InvalidDomainLevelError exceptions

2015-07-20 13:53:21 +02:00

trust.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

user.py

add permission: System: Manage User Certificates

2015-08-14 12:57:42 +02:00

vault.py

Asymmetric vault: validate public key in client

2015-08-13 19:18:19 +02:00

virtual.py

Give more info on virtual command access denial

2015-08-11 12:25:51 +02:00