Christian Heimes 9dda004f27 Allow permissions with 'self' bindruletype ...

Make it possible to create a managed permission with
ipapermbindruletype="self". The ACI will have bind rule
'(userdn = "ldap:///self")'.

Example
-------

Allow users to modify their own fasTimezone and fasIRCNick attributes:

```
managed_permissions = {
    "System: Self-Modify FAS user attributes": {
        "ipapermright": {"write"},
        "ipapermtargetfilter": ["(objectclass=fasuser)"],
        "ipapermbindruletype": "self",
        "ipapermdefaultattr": ["fasTimezone", "fasIRCNick"],
    }
}
```

See: https://github.com/fedora-infra/freeipa-fas/pull/107
Fixes: https://pagure.io/freeipa/issue/8348
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2020-06-07 10:18:03 +03:00

..

__init__.py

Server Upgrade: specify order of plugins in update files

2015-04-14 19:25:47 +02:00

adtrust.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

ca_renewal_master.py

Use api.env.container_masters

2019-03-28 00:21:00 +01:00

dns.py

Fix E713 test for membership should be 'not in'

2020-05-05 10:42:46 +02:00

fix_kra_people_entry.py

upgrade: fix ipakra people entry 'description' attribute

2019-10-17 08:17:46 +02:00

fix_replica_agreements.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

rename_managed.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

update_ca_topology.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

update_dna_shared_config.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

update_fix_duplicate_cacrt_in_ldap.py

Fix ipa-server-upgrade: This entry already exists

2017-08-30 12:47:53 +02:00

update_idranges.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

update_ldap_server_list.py

Fix E713 test for membership should be 'not in'

2020-05-05 10:42:46 +02:00

update_managed_permissions.py

Allow permissions with 'self' bindruletype

2020-06-07 10:18:03 +03:00

update_nis.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

update_pacs.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

update_passsync.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

update_ra_cert_store.py

upgrade: remove ipaCert and key from /etc/httpd/alias

2019-07-15 17:08:21 +03:00

update_referint.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

update_services.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

update_unhashed_password.py

Switch nsslapd-unhashed-pw-switch to nolog

2019-05-24 12:42:51 +02:00

update_uniqueness.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

upload_cacrt.py

CA: set ipaconfigstring:compatCA in cn=DOMAIN IPA CA

2019-05-22 17:53:13 +02:00