Ñò
Ã#xPc @ s” d d k Td d k l Z l Z l Z e d ƒ Z d e f d „ ƒ YZ e i e ƒ d e f d „ ƒ YZ
e i e
ƒ d e f d „ ƒ YZ e i e ƒ d
e
f d „ ƒ YZ e i e ƒ d e f d
„ ƒ YZ e i e ƒ d e f d „ ƒ YZ e i e ƒ d e f d „ ƒ YZ e i e ƒ d e f d „ ƒ YZ e i e ƒ d e f d „ ƒ YZ e i e ƒ d e f d „ ƒ YZ e i e ƒ d S( iÿÿÿÿ( t *( t apit _t ngettexts¹
Privileges
A privilege combines permissions into a logical task. A permission provides
the rights to do a single task. There are some IPA operations that require
multiple permissions to succeed. A privilege is where permissions are
combined in order to perform a specific task.
For example, adding a user requires the following permissions:
* Creating a new user entry
* Resetting a user password
* Adding the new user to the default IPA users group
Combining these three low-level tasks into a higher level task in the
form of a privilege named "Add User" makes it easier to manage Roles.
A privilege may not contain other privileges.
See role and permission for additional information.
t privilegec
B sæ e Z d Z e i i Z e d ƒ Z e d ƒ Z d d g Z
d d d d g Z h d g d 6d
g d 6Z h d
g d 6Z
e Z e d ƒ Z e d ƒ Z e d d
d d e d ƒ d e ƒe d d
d d e d ƒ d e d ƒ ƒf Z RS( s
Privilege object.
R t
privilegest nestedgroupt groupofnamest cnt descriptiont membert memberoft rolet
permissiont
Privilegest Privileget cli_namet namet labels Privilege namet primary_keyt desct Descriptiont docs Privilege description( t __name__t
__module__t __doc__R t envt container_privileget container_dnR t object_namet object_name_pluralt object_classt default_attributest attribute_memberst reverse_memberst Truet rdn_is_primary_keyR t label_singulart Strt takes_params( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyR , s,
t
privilege_addc B s e Z e d ƒ Z e d ƒ Z RS( s Add a new privilege.s Added privilege "%(value)s"( R R R R t msg_summary( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyR( Q s t
privilege_delc B s e Z e d ƒ Z e d ƒ Z RS( s Delete a privilege.s Deleted privilege "%(value)s"( R R R R R) ( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyR* Y s t
privilege_modc B s e Z e d ƒ Z e d ƒ Z RS( s Modify a privilege.s Modified privilege "%(value)s"( R R R R R) ( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyR+ a s t privilege_findc B s& e Z e d ƒ Z e d d d ƒ Z RS( s Search for privileges.s %(count)d privilege matcheds %(count)d privileges matchedi ( R R R R R R) ( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyR, i s t privilege_showc B s e Z e d ƒ Z RS( s& Display information about a privilege.( R R R R ( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyR- s s t privilege_add_memberc B s e Z e d ƒ Z e Z RS( s Add members to a privilege.( R R R R R# t NO_CLI( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyR. y s t privilege_remove_memberc B s e Z d Z e Z RS( s)
Remove members from a privilege
( R R R R# R/ ( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyR0 s t privilege_add_permissionc B sz e Z e d ƒ Z d Z d Z d Z d Z e i d ƒ e i
d d e d e d ƒ ƒe i
d
d e d e d ƒ ƒf Z
RS( s Add permissions to a privilege.R- t permission_add_memberR
R t resultt failedt typeR s Members that could not be addedt completeds Number of permissions added( R R R R t show_commandt member_commandt reverse_attrt member_attrt outputt Entryt Outputt dictt intt
has_output( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyR1 Š s t privilege_remove_permissionc B s€ e Z e d ƒ Z d Z d Z d Z d Z d Z e i
d ƒ e i d d e d
e d ƒ ƒe i d d e
d
e d
ƒ ƒf Z RS( s$ Remove permissions from a privilege.R- t permission_remove_memberR
R s %i permission removed.s %i permissions removed.R3 R4 R5 R s Members that could not be addedR6 s Number of permissions removed( s %i permission removed.s %i permissions removed.( R R R R R7 R8 R9 R: t permission_count_outR; R< R= R> R? R@ ( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyRA ¡ s N( t ipalib.plugins.baseldapt ipalibR R R R t
LDAPObjectR t registert
LDAPCreateR( t
LDAPDeleteR* t
LDAPUpdateR+ t
LDAPSearchR, t LDAPRetrieveR- t
LDAPAddMemberR. t LDAPRemoveMemberR0 t LDAPAddReverseMemberR1 t LDAPRemoveReverseMemberRA ( ( ( s< /usr/lib/python2.6/site-packages/ipalib/plugins/privilege.pyt s.
"