[Freeipa-devel] [PATCH] Fix delegation

Simo Sorce ssorce at redhat.com
Wed Feb 27 22:13:42 UTC 2008


On Wed, 2008-02-27 at 15:15 -0500, Rob Crittenden wrote:
> In the UI we don't want to display Edit links unless someone can 
> actually edit things. We use the 'editors' group for this. This group 
> itself grants no permission other than displaying certain things in
> the UI.
> 
> In order to be in the editors group a user must be a member of a
> group 
> that is the source group in a delegation. The memberof plugin will do 
> all thehard work to be sure that a user's memberof contains
> cn=editors 
> if they are in a delegated group.

ack, good job

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the Freeipa-devel mailing list