[Freeipa-devel] [PATCH] 120 Removal of memberofindirect_permissons from privileges

2012-04-10 Thread Petr Vobornik

Problem:
In the Privilege page, can list Permissions. This Shows Results for 
Direct

Membership. But there is an option to list this for Indirect Membership
also.
There isn't a way to nest permissions, so this option is not needed.

Solution:
This patch removes the memberofindirect_persmission definition from 
server plugin. It fixes the problem in Web UI.


https://fedorahosted.org/freeipa/ticket/2611
--
Petr Vobornik
From 8db7bc4e665c7bbd8baaba4e6d4f6925e1936139 Mon Sep 17 00:00:00 2001
From: Petr Vobornik pvobo...@redhat.com
Date: Tue, 10 Apr 2012 14:40:44 +0200
Subject: [PATCH] Removal of memberofindirect_permissons from privileges

Problem:
In the Privilege page, can list Permissions. This Shows Results for Direct
Membership. But there is an option to list this for Indirect Membership
also.
There isn't a way to nest permissions, so this option is not needed.

Solution:
This patch removes the memberofindirect_persmission definition from server plugin. It fixes the problem in Web UI.

https://fedorahosted.org/freeipa/ticket/2611
---
 ipalib/plugins/privilege.py |5 +
 1 files changed, 1 insertions(+), 4 deletions(-)

diff --git a/ipalib/plugins/privilege.py b/ipalib/plugins/privilege.py
index 53e1de223a2a8018b942255b9911488f762cb338..ba2428736c9cdd022680fc69e97d0b583a16a2d1 100644
--- a/ipalib/plugins/privilege.py
+++ b/ipalib/plugins/privilege.py
@@ -49,13 +49,10 @@ class privilege(LDAPObject):
 object_name = _('privilege')
 object_name_plural = _('privileges')
 object_class = ['nestedgroup', 'groupofnames']
-default_attributes = ['cn', 'description', 'member', 'memberof',
-'memberindirect', 'memberofindirect',
-]
+default_attributes = ['cn', 'description', 'member', 'memberof']
 attribute_members = {
 'member': ['role'],
 'memberof': ['permission'],
-'memberofindirect': ['permission'],
 }
 reverse_members = {
 'member': ['permission'],
-- 
1.7.7.6

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 120 Removal of memberofindirect_permissons from privileges

2012-04-10 Thread Rob Crittenden

Petr Vobornik wrote:

Problem:
In the Privilege page, can list Permissions. This Shows Results for
Direct
Membership. But there is an option to list this for Indirect Membership
also.
There isn't a way to nest permissions, so this option is not needed.

Solution:
This patch removes the memberofindirect_persmission definition from
server plugin. It fixes the problem in Web UI.

https://fedorahosted.org/freeipa/ticket/2611


ACK, pushed to master and ipa-2-2

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel