[Freeipa-devel] [PATCH] 744 webui: switch associators if default doesn't work
Endi Sukma Dewata
edewata at redhat.com
Thu Sep 4 18:33:27 UTC 2014
On 8/22/2014 11:29 AM, Petr Vobornik wrote:
> Ticket: https://fedorahosted.org/freeipa/ticket/4507
>
> Support for delegating RBAC roles to service principals added new
> attribute members. [1][2] Most of Web UI was automatically extended but
> the defaults chose wrong associator for service's memberof_role facet
>
> traditionally it would be solved by
>
> {
> $type: 'association',
> name: 'memberof_role',
> associator: IPA.serial_associator
> }
>
> This patch tries to make the auto-magic functionality little bit less
> stupid to eliminate a need for ^^ patches. It's far from perfect -
> doesn't support things like:
>
> {
> $type: 'association',
> name: 'memberof_sudorule',
> associator: IPA.serial_associator,
> add_method: 'add_user',
> remove_method: 'remove_user'
> }
>
> [1]
> https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=8fabd6dde152fc394bd4f093d93c8a46e5b2851b
>
> [2] https://fedorahosted.org/freeipa/ticket/3164
ACK.
--
Endi S. Dewata
More information about the Freeipa-devel
mailing list