[Freeipa-devel] [PATCH] 744 webui: switch associators if default doesn't work

Petr Vobornik pvoborni at redhat.com
Mon Sep 8 10:46:43 UTC 2014


On 4.9.2014 20:33, Endi Sukma Dewata wrote:
> On 8/22/2014 11:29 AM, Petr Vobornik wrote:
>> Ticket: https://fedorahosted.org/freeipa/ticket/4507
>>
>> Support for delegating RBAC roles to service principals added new
>> attribute members. [1][2] Most of Web UI was automatically extended but
>> the defaults chose wrong associator for service's memberof_role facet
>>
>> traditionally it would be solved by
>>
>>         {
>>              $type: 'association',
>>              name: 'memberof_role',
>>              associator: IPA.serial_associator
>>          }
>>
>> This patch tries to make the auto-magic functionality little bit less
>> stupid to eliminate a need for ^^ patches. It's far from perfect -
>> doesn't support things like:
>>
>>         {
>>              $type: 'association',
>>              name: 'memberof_sudorule',
>>              associator: IPA.serial_associator,
>>              add_method: 'add_user',
>>              remove_method: 'remove_user'
>>          }
>>
>> [1]
>> https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=8fabd6dde152fc394bd4f093d93c8a46e5b2851b
>>
>>
>> [2] https://fedorahosted.org/freeipa/ticket/3164
>
> ACK.
>
Pushed to:
master: f70eafaedbdc4a511338979198f9459ee5b47807
ipa-4-1: cb2dc9c5efaee6344daa32a9717336345a22f022

-- 
Petr Vobornik




More information about the Freeipa-devel mailing list