[Freeipa-devel] [PATCH] 055 Association facets are read only in self service

[Petr Vobornik]

This patch works with assumption that user in self-service mode doesn't 
have rights for enrolling/un-enrolling himself to/from group, role, hbac 
rule, net group, sudo rule. He can only read the attributes. Therefore 
in self service mode all user association facets are set read only.

Checking and working with the actual rights would require significantly 
bigger effort.

https://fedorahosted.org/freeipa/ticket/1972

-- 
Petr Vobornik
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pvoborni-0055-Association-facets-are-read-only-in-self-service.patch
Type: text/x-patch
Size: 2668 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20111212/eb20f9ad/attachment.bin>