[Freeipa-devel] [PATCHES] 0540-0542 Add managed read permissions to user

[Simo Sorce]

On Tue, 2014-05-27 at 18:01 +0300, Alexander Bokovoy wrote:
> On Tue, 27 May 2014, Petr Viktorin wrote:
> >On 05/26/2014 12:13 PM, Petr Viktorin wrote:
> >[...]
> >>
> >>Thanks for the thorough review!
> >>Pushed to master: 63becae88c6c270b98f0432dc474b661b82f3119
> >
> >
> >Okay guys, we have another issue:
> >user-add (and the migration plugin) needs access to cn=UPG 
> >Definition,cn=Definitions,cn=Managed Entries,cn=etc,... to check the 
> >originfilter for '(objectclass=disable)'.
> >
> >Do we want to give read access to all users, or just user admins?
> I would say user admins. If something more substantial fails, we'll
> extend the access.
> 

ACK