[Freeipa-devel] [PATCH] Fix delegation
Simo Sorce
ssorce at redhat.com
Wed Feb 27 22:13:42 UTC 2008
On Wed, 2008-02-27 at 15:15 -0500, Rob Crittenden wrote:
> In the UI we don't want to display Edit links unless someone can
> actually edit things. We use the 'editors' group for this. This group
> itself grants no permission other than displaying certain things in
> the UI.
>
> In order to be in the editors group a user must be a member of a
> group
> that is the source group in a delegation. The memberof plugin will do
> all thehard work to be sure that a user's memberof contains
> cn=editors
> if they are in a delegated group.
ack, good job
--
Simo Sorce * Red Hat, Inc * New York
More information about the Freeipa-devel
mailing list