Bug 670595

Summary: typo in ipa help permission
Product: [Retired] freeIPA Reporter: Yi Zhang <yzhang>
Component: ipa-serverAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: Chandrasekar Kannan <ckannan>
Severity: low Docs Contact:
Priority: low    
Version: 2.0CC: benl, dpal, jgalipea, mkosek
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: freeipa-2.0.0-1.fc15 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Yi Zhang 2011-01-18 18:31:52 UTC 
Description of problem:
There is a typo in "ipa help permission"

in the section:
 Add a permission that grants the ability to manage group membership:
   ipa permission-add --desc='Manage group members' --attrs=member --permissions=-write --type=group manage_group_members

it should be
"--permission=write" instead of "--permission=-write"
--> there is no "-" before "write"


Version-Release number of selected component (if applicable):ipa-server-2.0-0.2011011115gitc778919.fc14.i686


How reproducible: always


Steps to Reproduce:
1. ipa help permission
Comment 1 Dmitri Pal 2011-01-18 20:22:35 UTC 
https://fedorahosted.org/freeipa/ticket/802
Comment 2 Martin Kosek 2011-01-27 09:21:09 UTC 
Fixed in 65a146cdca7c62301b5be978027a44d880424529
Comment 3 Jenny Severance 2011-06-10 18:53:37 UTC 
verified

# ipa help permission-add
Purpose: Add a new permission.
Usage: ipa [global-options] permission-add NAME [options]

Options:
  -h, --help          show this help message and exit
  --permissions=LIST  Comma-separated list of permissions to grant (read,
                      write, add, delete, all)
  --attrs=LIST        Comma-separated list of attributes
  --type=STRENUM      Type of IPA object (user, group, host, hostgroup,
                      service, netgroup, dns)
  --memberof=STR      Target members of a group
  --filter=STR        Legal LDAP filter (e.g. ou=Engineering)
  --subtree=STR       Subtree to apply permissions to
  --targetgroup=STR   User group to apply permissions to
  --addattr=STR       Add an attribute/value pair. Format is attr=value. The
                      attribute must be part of the schema.
  --setattr=STR       Set an attribute to a name/value pair. Format is
                      attr=value. For multi-valued attributes, the command
                      replaces the values already present.
  --all               Retrieve and print all attributes from the server.
                      Affects command output.
  --raw               Print entries as stored on the server. Only affects
                      output format.

# rpm -qi ipa-server | head
Name        : ipa-server                   Relocations: (not relocatable)
Version     : 2.0.0                             Vendor: Red Hat, Inc.
Release     : 23.el6                        Build Date: Wed 20 Apr 2011 09:57:13 AM EDT
Install Date: Thu 19 May 2011 12:47:52 PM EDT      Build Host: x86-003.build.bos.redhat.com
Group       : System Environment/Base       Source RPM: ipa-2.0.0-23.el6.src.rpm
Size        : 2565882                          License: GPLv3+
Signature   : RSA/8, Thu 21 Apr 2011 03:48:25 PM EDT, Key ID 199e2f91fd431d51
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://www.freeipa.org/
Summary     : The IPA authentication server