[Freeipa-devel] [PATCHES] 0510-0511 Add managed read permissions to group & hostgroup

Martin Kosek mkosek at redhat.com
Wed Apr 9 08:53:39 UTC 2014


On 04/08/2014 02:25 PM, Petr Viktorin wrote:
> Hello,
> These add read permissions to read user groups and hostgroups.
> 
> For most attributes, anonymous read access is given.
> For member, memberOf, memberUID, read access is given only to authenticated users.

Didn't we agree that we want to make hostgroups read by authenticated users
only? Just like we did with netgroups. CCing Simo to confirm.

Besides the default bind type, the ACI looked ok.

Martin




More information about the Freeipa-devel mailing list