[Freeipa-devel] [PATCH] Fix delegation
Rob Crittenden
rcritten at redhat.com
Wed Feb 27 20:15:35 UTC 2008
In the UI we don't want to display Edit links unless someone can
actually edit things. We use the 'editors' group for this. This group
itself grants no permission other than displaying certain things in the UI.
In order to be in the editors group a user must be a member of a group
that is the source group in a delegation. The memberof plugin will do
all thehard work to be sure that a user's memberof contains cn=editors
if they are in a delegated group.
rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-708-delegation.patch
Type: text/x-patch
Size: 10816 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080227/85360f64/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080227/85360f64/attachment-0001.bin>
More information about the Freeipa-devel
mailing list