[Freeipa-users] Bug: FreeIPA 2.2.0 on CentOS 6.3 Any User can see the details of all the Users through GUI

[Petr Viktorin]

On 02/01/2013 12:26 PM, Rajnesh Kumar Siwal wrote:
> Any User throug IPA GUI can see the details of all the other users.
> He should be able to see his own details.

This is by design, see for example the note at 
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html-single/Identity_Management_Guide/index.html#defining-roles

> Additionally the , Change Passwords link is enabled corresponding to
> all Users (appears to any regular user).
> I am in Migration Mode.

Do you mean that any user can change another users' password?
The change password link should be grayed out on other users' pages.

-- 
Petr³