[Freeipa-devel] [PATCH] 285 Add automount map/key update permissions

[Rob Crittenden]

Martin Kosek wrote:
> Add missing permissions that can be used to delegate write access
> to existing automount maps or keys.
>
> Since automount key RDN has been changed in the past from "automountkey"
> to "description" and there can be LDAP entries with both RDNs,
> structure of relevant ACI need to be changed to different scheme. Now,
> it rather targets a DN of parent automount map object and uses
> targetfilter to limit the target to automount key objects only.
>
> https://fedorahosted.org/freeipa/ticket/2687
>
>

ACK, pushed to master