3db0822 Add support for managed permissions

Authored and Committed by pviktori 10 years ago
    Add support for managed permissions
    
    This adds support for managed permissions. The attribute list
    of these is computed from the "default" (modifiable only internally),
    "allowed", and "excluded" lists. This makes it possible to cleanly
    merge updated IPA defaults and user changes on upgrades.
    
    The default managed permissions are to be added in a future patch.
    For now they can only be created manually (see test_managed_permissions).
    
    Tests included.
    
    Part of the work for: https://fedorahosted.org/freeipa/ticket/4033
    Design: http://www.freeipa.org/page/V3/Managed_Read_permissions
    Reviewed-By: Martin Kosek <mkosek@redhat.com>
    
        
file modified
+8 -6
file modified
+2 -1
file modified
+2 -2
file modified
+2 -0
file modified
+131 -13