c309d4a acme: add Dogtag ACL to allow ACME agents to revoke certs

1 file Authored by ftweedal 3 years ago, Committed by rcritten 3 years ago,
    acme: add Dogtag ACL to allow ACME agents to revoke certs
    
    Add an ACL to allow ACME agents to revoke certificates.  Although
    the operation "execute" sounds quite scary (as though it would have
    a wide scope), in fact it only allows revocation (and unrevocation).
    See CertResource.java and base/ca/shared/conf/acl.properties in the
    Dogtag source.
    
    Part of: https://pagure.io/freeipa/issue/4751
    
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>