Issue #4372: Users cannot access private groups - freeipa

freeipa

#4372 Users cannot access private groups

Closed: Fixed None Opened 9 years ago by mkosek.

$ kinit fbar
Password for fbar@EXAMPLE.COM:

# ipa group-find --private
----------------
0 groups matched
----------------
----------------------------
Number of entries returned 0
----------------------------

The problem is that UPG do not have ipausergroup which is in ACI filter. We should filter ACI by posixGroup instead.

pviktori commented 9 years ago

Actually we should filter by groupofnames or nestedGroup; not all groups are posix.

pviktori commented 9 years ago

master:

02b5074 permission plugin: Join --type objectclass filters with OR
ac8539b Add posixgroup to groups' permission object filter

Metadata Update from @mkosek:
- Issue assigned to pviktori
- Issue set to the milestone: FreeIPA 4.0 - 2014/06

7 years ago

Metadata

Assignee

pviktori

Tags

None

Blocking

None

Depending on

None

Priority

normal

Milestone

FreeIPA 4.0 - 2014/06

None

affects_doc

None

source

None

knownissue

None

type

defect

blockedby

None

test_case

None

component

Access control

blocking

None

on_review

keywords

easyfix

test_coverage

None

reviewer

None

external_tracker

None

rhbz

tester

None

changelog

None

design

None

freeipa

Source Code

#4372 Users cannot access private groups Closed: Fixed None Opened 9 years ago by mkosek.

Metadata

#4372 Users cannot access private groups

Closed: Fixed None Opened 9 years ago by mkosek.