Fraser Tweedale 947af1a037 Enforce CA ACLs in cert-request command ...

This commit adds CA ACL enforcement to the cert-request command and
uses the pyhbac machinery.

It is planned to implement ACL enforcement in Dogtag in a future
release, and remove certificate issuance privileges and CA ACL
enforcement responsibility from the framework.  See
https://fedorahosted.org/freeipa/ticket/5011 for more information.

Part of: https://fedorahosted.org/freeipa/ticket/57
Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Martin Basti <mbasti@redhat.com>

2015-06-11 10:50:31 +00:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

aci plugin: Fix internal error when ACIs are not readable

2014-05-29 16:22:37 +02:00

automember.py

Fix error message for nonexistent members and add tests.

2014-11-24 16:04:57 +01:00

automount.py

Add several CRUD default permissions

2014-06-24 13:53:41 +02:00

baseldap.py

baseldap: Fix possible crash in LDAPObject.handle_duplicate_entry

2015-05-15 14:28:52 +00:00

baseuser.py

Add usercertificate attribute to user plugin

2015-06-04 08:27:33 +00:00

batch.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

caacl.py

Enforce CA ACLs in cert-request command

2015-06-11 10:50:31 +00:00

cert.py

Enforce CA ACLs in cert-request command

2015-06-11 10:50:31 +00:00

certprofile.py

Add certprofile plugin

2015-06-04 08:27:33 +00:00

config.py

Expose the disabled User Auth Type

2015-02-12 10:31:24 +01:00

delegation.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

dns.py

DNS: remove NSEC3PARAM from records

2015-03-09 15:21:04 +01:00

domainlevel.py

Add Domain Level feature

2015-05-26 11:59:47 +00:00

group.py

group-detach does not add correct objectclasses

2015-02-18 13:18:31 +01:00

hbacrule.py

Convert HBAC Rule default permissions to managed

2014-06-24 13:53:40 +02:00

hbacsvc.py

Convert HBAC Service default permissions to managed

2014-06-24 13:53:40 +02:00

hbacsvcgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

hbactest.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

host.py

Fix: regression in host and service plugin

2015-06-03 17:52:30 +00:00

hostgroup.py

hostgroup: Selected PEP8 fixes for the hostgroup plugin

2014-09-30 10:42:06 +02:00

idrange.py

idrange: include raw range type in output

2014-11-11 10:56:16 +01:00

idviews.py

idviews: Use case-insensitive detection of Default Trust View

2015-02-23 17:51:21 +01:00

internal.py

webui: topology plugin

2015-06-04 13:20:44 +02:00

kerberos.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

krbtpolicy.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

migration.py

Migration now accepts scope as argument

2015-06-05 19:31:18 +02:00

misc.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

netgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

otpconfig.py

Fix TOTP Synchronization Window label

2015-02-17 08:26:42 +01:00

otptoken_yubikey.py

Create an OTP help topic

2014-12-05 13:44:51 +01:00

otptoken.py

Make lint work on Fedora 22.

2015-04-27 11:02:57 +02:00

passwd.py

ipa-passwd: add OTP support

2014-06-26 12:37:38 +02:00

permission.py

User life cycle: Stage user Administrators permission/priviledge

2015-05-18 09:37:21 +02:00

ping.py

Allow API plugin registration via a decorator

2013-08-14 12:08:27 +02:00

pkinit.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

privilege.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

pwpolicy.py

pwpolicy-add: Added better error handling

2014-09-02 10:40:12 +02:00

radiusproxy.py

Split long docstrings that were recently modified

2014-06-10 13:19:32 +02:00

realmdomains.py

Add Modify Realm Domains permission

2014-07-04 12:17:04 +02:00

role.py

speed up indirect member processing

2015-04-27 05:55:04 +00:00

rpcclient.py

Switch client to JSON-RPC

2013-11-26 16:59:59 +01:00

selfservice.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

selinuxusermap.py

Convert SELinux User Map default permissions to managed

2014-06-24 13:53:41 +02:00

server.py

server-find and server-show commands

2015-05-26 12:16:31 +00:00

service.py

Add generic split_any_principal method

2015-06-04 08:27:33 +00:00

servicedelegation.py

Add plugin to manage service constraint delegations

2015-06-03 09:47:40 +00:00

stageuser.py

User life cycle: Add 'Stage User Provisioning' permission/priviledge

2015-05-18 09:37:21 +02:00

sudocmd.py

Convert Sudo Command default permissions to managed

2014-06-24 13:53:41 +02:00

sudocmdgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

sudorule.py

Sudorule RunAsUser should work with external groups

2014-10-02 11:06:47 +02:00

topology.py

topology: hide topologysuffix-add del mod commands

2015-06-10 14:16:03 +02:00

trust.py

Remove ipanttrustauthincoming/ipanttrustauthoutgoing from ipa trust-add output.

2015-01-13 15:33:55 +01:00

user.py

Add usercertificate attribute to user plugin

2015-06-04 08:27:33 +00:00

vault.py

vault: Fix ipa-kra-install

2015-06-10 16:17:34 +00:00

virtual.py

Internationalization for public errors

2012-09-03 18:16:12 +02:00