Add a default privilege for administrators

A default privilege for adminstering profiles is added.
abbra · May 29, 2018 · 8fb4a16 · 8fb4a16
1 parent 1c0c34c
commit 8fb4a16
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 1 deletion.
diff --git a/freeipa-desktop-profile.spec b/freeipa-desktop-profile.spec
@@ -7,7 +7,7 @@
 %endif
 
 Name:           freeipa-%{plugin_name}
-Version:        0.0.7
+Version:        0.0.8
 Release:        1%{?dist}
 Summary:        FleetCommander integration with FreeIPA
 
@@ -192,6 +192,10 @@ fi
 %endif
 
 %changelog
+* Tue May 29 2018 Alexander Bokovoy <abokovoy@redhat.com> 0.0.8-1
+- Add a default privilege 'FleetCommander Desktop Profile Administrators'
+  during upgrade
+
 * Mon May 21 2018 Alexander Bokovoy <abokovoy@redhat.com> 0.0.7-1
 - Add a default role 'FleetCommander Desktop Profile Administrators'
   during upgrade

diff --git a/plugin/updates/75-deskprofile.update b/plugin/updates/75-deskprofile.update
@@ -29,9 +29,20 @@ default: objectClass: cosIndirectDefinition
 default: cosIndirectSpecifier: ipaDeskProfileTarget
 default: cosAttribute: ipaDeskData override
 
+############################################
+# Add the default privileges and roles
+############################################
 dn: cn=FleetCommander Desktop Profile Administrators,cn=roles,cn=accounts,$SUFFIX
 default:objectClass: groupofnames
 default:objectClass: nestedgroup
 default:objectClass: top
 default:cn: FleetCommander Desktop Profile Administrators
 default:description: Responsible for managing desktop profiles
+
+dn: cn=FleetCommander Desktop Profile Administrators,cn=privileges,cn=pbac,$SUFFIX
+default:objectClass: top
+default:objectClass: groupofnames
+default:objectClass: nestedgroup
+default:cn: FleetCommander Desktop Profile Administrators
+default:description: FleetCommander Desktop Profile Administrators
+default:member: cn=FleetCommander Desktop Profile Administrators,cn=roles,cn=accounts,$SUFFIX