Files
freeipa/ipaserver
Alexander Bokovoy ec22295fed sysaccounts: extend permissions to include description and account lock
Security Architect role was supposed to manage sysaccount objects. But
since description attribute is missing from the list of the managed
permissions, the role is unable to modify 'description' field. Same for
nsAccountLock which needs an explicit ACI.

Fixes: https://pagure.io/freeipa/issue/9875

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
2025-11-12 17:16:48 +01:00
..
2010-12-20 17:19:53 -05:00
2025-09-12 14:03:09 +02:00
2020-06-23 10:16:29 +02:00
2020-04-28 11:28:29 +02:00
2016-10-20 18:43:37 +02:00
2021-04-07 11:43:23 +03:00