[Freeipa-devel] [PATCH 0233] trusts: Add more read attributes

[Petr Viktorin]

On 06/24/2014 08:15 PM, Tomas Babej wrote:
> Attaching patch 234, which resolves another ACI issue related to trusts.
>
> On 06/24/2014 02:50 PM, Tomas Babej wrote:
>> Hi,
>>
>> this is a follow up patch for 232. Read access to additional attributes
>> is required for the trust objects.
>>

First patch looks fine.

For the second: should the trust ACIs apply to other objects than 
(objectclas=ipanttrusteddomain)?
If not, we can enable "--type=trust" permissions and use it to specify 
location & filter, see attached patch.


-- 
Petr³
-------------- next part --------------
A non-text attachment was scrubbed...
Name: trusts-Allow-reading-system-trust-accounts-by-adtrus.patch
Type: text/x-patch
Size: 5079 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140625/b3b8f28e/attachment.bin>