[Freeipa-devel] [PATCH] 167 Add and remove dns per-domain permission in Web UI

[Petr Vobornik]

Patch functionality depends on not yet posted pviktori's patch which 
adds error_code (in case of command error) to batch response.

Patch description:

This patch adds support for new per-domain permissions to Web UI.

User with assigned permission (through role,priviledge) can edit DNS 
zone. These permissions can be added/remove by ipa 
dnszone-{add/remove}permission $dnszone command.

For adding/removing of this permission in Web UI new actions in DNS zone 
action list were created. DNS zone object doesn't contain information 
about existance of related permission. Such information is required for 
enabling/disabling of new actions. Web UI has to search for the 
permission to get it. DNS zone facet was modified to use batch command, 
in a same way as user facet, for loading dnszone and the permission at 
the same time - on load.

Batch command has a feature to report all errors. Such behavior is 
unwanted because we expect that permission-show command will fail when 
the permission doesn't exist. Batch command was therefore modified to 
not report commands which has retry attribute set to false. This attr 
was chosen because it has similar purpose in single command execution.

New actions should be enabled only for users with appropriate rights. It 
is not possible to obtain rights for certain action in advance so an 
approximation is used: write right for dns zones' managedby attribute.

https://fedorahosted.org/freeipa/ticket/2851
-- 
Petr Vobornik

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pvoborni-0167-Add-and-remove-dns-per-domain-permission-in-Web-UI.patch
Type: text/x-patch
Size: 16495 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20120709/10fd461a/attachment.bin>