[Freeipa-devel] [PATCHES] 0540-0542 Add managed read permissions to user

[Petr Viktorin]

Patch 0540 adds a bunch of managed read ACIs for user, as discussed 
previously [0].

Patch 0541 is some minor refactoring for the next part.

Patch 0542 sets the read acces to addressbook attributes to anonymous 
when upgrading from pre-4.0.
I first this by checking if the update is run from ipa-server-install or 
not, but then I realized the logic I want is simple: if the global anon 
read ACI exists, we want to preserve its spirit by setting addressbook 
attribute ACI to anonymous.


[0] 
http://www.redhat.com/archives/freeipa-devel/2014-April/msg00363.html et al.

-- 
Petr³
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0540-Add-managed-read-permissions-to-user.patch
Type: text/x-patch
Size: 3731 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140429/c85162ec/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0541-update_managed_permissions-Pass-around-anonymous-ACI.patch
Type: text/x-patch
Size: 4962 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140429/c85162ec/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0542-Set-user-addressbook-attribute-read-ACI-to-anonymous.patch
Type: text/x-patch
Size: 3824 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140429/c85162ec/attachment-0002.bin>