[Freeipa-devel] Screens For HBAC Testing (Ticket #388)

[Dmitri Pal]

On 11/09/2011 05:08 PM, Kyle Baker wrote:
> Endi and I worked to create the model for the new HBAC Testing section. The screens are attached.
>
> Kyle Baker
> Visual Designer       Desk (978) 392 3116
> UX Team               IRC  kylebaker
>
Since "from" host is unreliable, one of the latest decisions in SSSD was
to ignore "from" host part of the rule by default (causes a lot of
performance issues too) and have a config parameter to explicitly not
ignore it. I think the UI should reflect in some way that "From" should
not be generally used and not an "equal" citizen  of the HBAC rule. We
probably should update the existing UI too to discourage people from
using it and also document it in man pages for HBAC and in the docs.

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/