Bug 782840

Summary:	[ipa webui] Permissions do not allow Read to be set as a permission
Product:	Red Hat Enterprise Linux 6	Reporter:	Namita Soman <nsoman>
Component:	ipa	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED NOTABUG	QA Contact:	IDM QE LIST <seceng-idm-qe-list>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.2	CC:	dpal, mkosek
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-01-25 14:23:01 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Namita Soman 2012-01-18 16:33:41 UTC

Description of problem:
cli can be used to add a permission:
ipa permission-add ManageUser1 --permissions="read" --type=user --attr=carlicense

But WebUI cannot be used to set a similar permission, where the permission is Read. Allowed permissions in UI are: Write, Add, Delete

Help does indicate:
Read permission is granted for most attributes by default so the read 
permission is not expected to be used very often. 


Version-Release number of selected component (if applicable):
ipa-server-2.2.0-101.20120117T0229zgit5febffb.el6.x86_64

How reproducible:
always

Steps to Reproduce:
1. Add a permission

  
Actual results:
Read is not a permission that can be selected


Expected results:
Read to be listed as a permission that can be selected

Additional info:

Comment 2 Rob Crittenden 2012-01-18 17:32:58 UTC

This was a conscious decision.

I added read as a permission type for completeness since it is a possible type in a 389-ds aci. Because we don't provide a facility to create "deny" rules and most attributes are already readable.

The decision was to remove read from the list in the UI and leave it in the list on the cli.

I propose closing as not a bug.

Comment 3 Dmitri Pal 2012-01-18 17:59:54 UTC

I agree with Rob.

Comment 4 Dmitri Pal 2012-01-18 19:46:36 UTC

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/1787