mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 22:50:12 -05:00
Security Architect role was supposed to manage sysaccount objects. But since description attribute is missing from the list of the managed permissions, the role is unable to modify 'description' field. Same for nsAccountLock which needs an explicit ACI. Fixes: https://pagure.io/freeipa/issue/9875 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>