Hide Forgot
Description of problem: cli can be used to add a permission: ipa permission-add ManageUser1 --permissions="read" --type=user --attr=carlicense But WebUI cannot be used to set a similar permission, where the permission is Read. Allowed permissions in UI are: Write, Add, Delete Help does indicate: Read permission is granted for most attributes by default so the read permission is not expected to be used very often. Version-Release number of selected component (if applicable): ipa-server-2.2.0-101.20120117T0229zgit5febffb.el6.x86_64 How reproducible: always Steps to Reproduce: 1. Add a permission Actual results: Read is not a permission that can be selected Expected results: Read to be listed as a permission that can be selected Additional info:
This was a conscious decision. I added read as a permission type for completeness since it is a possible type in a 389-ds aci. Because we don't provide a facility to create "deny" rules and most attributes are already readable. The decision was to remove read from the list in the UI and leave it in the list on the cli. I propose closing as not a bug.
I agree with Rob.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/1787