On 06/30/2016 03:55 PM, Nathaniel McCallum wrote: > On Thu, 2016-06-30 at 13:42 +0200, Petr Vobornik wrote: >> On 06/29/2016 04:40 PM, Stanislav Laznicka wrote: >>> >>> On 06/29/2016 04:02 PM, Stanislav Laznicka wrote: >>>> >>>> On 06/29/2016 03:53 PM, Martin Basti wrote: >>>>> >>>>> >>>>> >>>>> On 29.06.2016 15:52, Stanislav Laznicka wrote: >>>>>> >>>>>> On 06/24/2016 03:14 PM, Martin Basti wrote: >>>>>>> >>>>>>> >>>>>>> >>>>>>> On 24.06.2016 15:11, Sumit Bose wrote: >>>>>>>> >>>>>>>> On Tue, Jun 21, 2016 at 02:25:49PM -0400, Nathaniel >>>>>>>> McCallum wrote: >>>>>>>>> >>>>>>>>> https://fedorahosted.org/freeipa/ticket/433 >>>>>>>> The patch works for me as expected, but the API.txt >>>>>>>> update is >>>>>>>> missing in >>>>>>>> the patch. >>>>>>>> >>>>>>>> bye, >>>>>>>> Sumit >>>>>>> >>>>>>> There are no updated managed permissions for >>>>>>> krbprincipalauthind >>>>>>> attribute in hosts.py, is this omitted on purpose? >>>>>>> Martin^2 >>>>>>> >>>>>> The attached patch adds them should these be required. >>>>>> >>>>>> >>>>> >>>>> Then we also needs patch for services.py, because there are >>>>> missing >>>>> ACIs too >>>>> >>>>> Martin^2 >>>> >>>> It was already included but let me separate it in two patches, >>>> then. >>>> >>>> >>> Good catch from Petr Vobornik - the rebuilt ACI.txt should also be >>> included. >>> >> >> Attaching new version of Nathnaniel's patch with API.txt and VERSION >> updated. >> >> ACK for 0096-2 >> >> Pushed to master >> * 0855b014b1edcb1632a41e380220abd7bb5e481a Add authentication >> indicators >> support to Host objects. >> >> The "{Service|Host} {Read|Modify} " permissions looks good to me. >> ACK >> if Nathaniel agrees that it doesn't deserved it's own permission for >> modify. > > I agree. We can add it later if someone needs it. >
pushed to master: * 97db87b383b1ae4639bdb51793354bad30adf5a9 host: Added permissions for auth. indicators read/modify * 235b19ba7f9807ecf10436d1a5b28518b4475a70 service: Added permissions for auth. indicators read/modify -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code