#5055 DNS Administrators cannot search in zones
Closed: Fixed None Opened 8 years ago by mbasti.

Search filter contains attributes which are not allowed by ACI:
hiprecord, spfrecord, tkeyrecord, tarecord, dhcidrecord, sigrecord, aplrecord, nsec3record, rprecord, dnskeyrecord

This prevent users with 'DNS Administrator' privilege to search zones.

How to reproduce:

kinit user

ipa zone-find test
<0 result returned>

kinit admin
ipa zone-find test
<results>

Related ticket: #4934


master:

  • 5ea41ab DNS: Consolidate DNS RR types in API and schema

ipa-4-2:

  • bb64985 DNS: Consolidate DNS RR types in API and schema

Metadata Update from @mbasti:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.2.1

7 years ago

Login to comment on this ticket.

Metadata