[Freeipa-devel] [PATCH] 0635 Support delegating RBAC roles to service principals

Martin Kosek mkosek at redhat.com
Tue Aug 19 11:41:22 UTC 2014


On 08/19/2014 01:28 PM, Petr Viktorin wrote:
> Services can now be added to roles.
> 
> https://fedorahosted.org/freeipa/ticket/3164
> 
> 
> I added a new integration test for checking that a service can actually use the
> right granted by a role. I don't think there's a good way to do this kind of
> thing in our Declarative test suite.

1) I think you also need to update service object's attribute_members so that
it can properly show role membership.

2) Why did you skip updating VERSION file?

3) We will also need patch for Web UI (will require fix for 1. IMO). CCing Petr
Vobornik to help with 3).

Martin




More information about the Freeipa-devel mailing list