#5138 [RFE] Create Sudo Commando Groups without creating singular Sudo Commands prior to grouping
Opened 8 years ago by pvoborni. Modified 7 years ago

Based on user request.

The goal is to make sudo rule/command group/command easier.

One of proposals:

Extend Web UI dialog "Add Sudo Command Group" in following fashion.

+-------------------------------------------------------+
| Add Sudo Command Group                                |
|                                                       |
| Sudo command group: [ groupname                  ]    |
| Sudo command:       [ cmd1                       ]    |
|                     [ cmd2                       ]    |
|                     [ cmd3                       ] add|
| Description:        [                            ]    |
|                     [                            ]    |
|                                                       |
|                                   [add] [..] [cancel] |
+-------------------------------------------------------+

Which would be equivalent to:

  • ipa sudocmd-add cmd1
  • ipa sudocmd-add cmd2
  • ipa sudocmd-add cmd3
  • ipa sudocmdgroup-add groupname
  • ipa sudocmdgroup-add-member groupname --sudocmds={cmd1, cmd2, cmd3}

It might be even taken little bit further - to speedup creation of similar objects like sudo rules and roles.


It would be better to have UX design for creation of related objects, not just sudo. Similar request could be made for HBAC, RBAC. Something like a wizard which was proposed by Adam Y. couple years ago.

Metadata Update from @pvoborni:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog

7 years ago

Login to comment on this ticket.

Metadata