[Freeipa-devel] [PATCH] Fix delegation

Rob Crittenden rcritten at redhat.com
Wed Feb 27 20:15:35 UTC 2008


In the UI we don't want to display Edit links unless someone can 
actually edit things. We use the 'editors' group for this. This group 
itself grants no permission other than displaying certain things in the UI.

In order to be in the editors group a user must be a member of a group 
that is the source group in a delegation. The memberof plugin will do 
all thehard work to be sure that a user's memberof contains cn=editors 
if they are in a delegated group.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-708-delegation.patch
Type: text/x-patch
Size: 10816 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080227/85360f64/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080227/85360f64/attachment-0001.bin>


More information about the Freeipa-devel mailing list