[Freeipa-devel] [PATCH] 055 Association facets are read only in self service

Endi Sukma Dewata edewata at redhat.com
Mon Dec 12 19:42:21 UTC 2011


On 12/12/2011 9:27 AM, Petr Vobornik wrote:
> This patch works with assumption that user in self-service mode doesn't
> have rights for enrolling/un-enrolling himself to/from group, role, hbac
> rule, net group, sudo rule. He can only read the attributes. Therefore
> in self service mode all user association facets are set read only.
>
> Checking and working with the actual rights would require significantly
> bigger effort.
>
> https://fedorahosted.org/freeipa/ticket/1972

Pushed to master.

-- 
Endi S. Dewata




More information about the Freeipa-devel mailing list