Hide Forgot
Description of problem: When using addattr or setattr, permissions cannot be modified to pick those new attributes 1> Add a permission # ipa permission-add ManageUser --permissions="read,write" --type=user --attr=carlicense ----------------------------- Added permission "ManageUser" ----------------------------- Permission name: ManageUser Permissions: read, write Attributes: carlicense Type: user 2> Use setattr to modify permissions: # ipa permission-mod --setattr permissions=read ManageUser [Attributes]: carlicense [Type]: user [Member of group]: [Filter]: [Subtree]: [Target group]: ipa: ERROR: no modifications to be performed 3> Check if any changes were made: # ipa permission-show --all --raw ManageUser dn: cn=manageuser,cn=permissions,cn=pbac,dc=testrelm cn: ManageUser permissions: read permissions: write attrs: carlicense type: user objectclass: groupofnames objectclass: ipapermission objectclass: top 4> Also tried: # ipa permission-mod --addattr attrs=description ManageUser [Attributes]: audio [Type]: user [Member of group]: [Filter]: [Subtree]: [Target group]: -------------------------------- Modified permission "ManageUser" -------------------------------- Permission name: ManageUser Permissions: read, write Attributes: audio Type: user Version-Release number of selected component (if applicable): freeipa-server-2.1.4-4.fc16.x86_64 How reproducible: always Steps to Reproduce: 1. As listed above Actual results: No modifications are made Expected results: attr to be updated Additional info:
Upstream ticket: https://fedorahosted.org/freeipa/ticket/2279
This is fixed in ipa-server-3.3.3-4.el7.x86_64 Automation test results: :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ipa-permission-cli-1059 - modify permission --setattr (bz782861) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ 16:08:41 ] :: Executing: ipa permission-mod APermission --setattr=description=NewDescription --attrs= --------------------------------- Modified permission "APermission" --------------------------------- Permission name: APermission Permissions: write Type: user :: [ 16:08:43 ] :: Modified permission APermission successfully :: [ PASS ] :: Running 'modifyPermission "APermission" --setattr=description=NewDescription --attrs=' (Expected 0, got 0) :: [ 16:08:43 ] :: Executing: ipa permission-show --all "APermission" > /tmp/tmp.3ahW2Teeuy/permissionshow.out description: NewDescription :: [ 16:08:44 ] :: ipa permission APermission Verification successful: Value of Description: = NewDescription :: [ PASS ] :: Verify Permissions (Expected 0, got 0) 'ef891add-ad46-4be9-8119-7de56cd33b38' ipa-permission-cli-1059-modify-permission-setattr-bz782861- result: PASS
Given Comment 5, closing as fixed.