[Freeipa-devel] [PATCH] 0635 Support delegating RBAC roles to service principals

[Petr Viktorin]

On 08/19/2014 01:41 PM, Martin Kosek wrote:
> On 08/19/2014 01:28 PM, Petr Viktorin wrote:
>> Services can now be added to roles.
>>
>> https://fedorahosted.org/freeipa/ticket/3164
>>
>>
>> I added a new integration test for checking that a service can actually use the
>> right granted by a role. I don't think there's a good way to do this kind of
>> thing in our Declarative test suite.
>
> 1) I think you also need to update service object's attribute_members so that
> it can properly show role membership.

Right, added (with tests).

> 2) Why did you skip updating VERSION file?

A rookie mistake. (Forgot to save the file)

> 3) We will also need patch for Web UI (will require fix for 1. IMO). CCing Petr
> Vobornik to help with 3).


Updated patch attached.

-- 
Petr³
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0635.2-Support-delegating-RBAC-roles-to-service-principals.patch
Type: text/x-patch
Size: 14534 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140819/ae9644c9/attachment.bin>