Attachment 10516 Details for Bug 52215 – ACL patch for wg mail addresses

[patch] ACL patch for wg mail addresses

acl.patch (text/plain), 2.08 KB, created by Ole Schwiegert on 2020-10-14 13:53:30 CEST

(hide)

Description:

Filename:

MIME Type:

Creator: Ole Schwiegert

Created: 2020-10-14 13:53:30 CEST

Size: 2.08 KB

patch

obsolete

>diff --git a/ucs-school-ldap-acls-master/65ucsschool b/ucs-school-ldap-acls-master/65ucsschool
>index e8d8f94bb..a37392da7 100644
>--- a/ucs-school-ldap-acls-master/65ucsschool
>+++ b/ucs-school-ldap-acls-master/65ucsschool
>@@ -152,11 +152,11 @@ access to dn.regex="^cn=([^,]+),(cn=@$@TEACHERS@$@,|cn=@$@PUPILS@$@,|)cn=groups,
> 
> # Lehrer, Mitarbeiter und OU-Admins muessen einige temporaere Objekte schreiben duerfen
> # da keine regulaeren Ausdruecke auf Gruppenmitgliedschaften moeglich sind wird dies allen Lehrern erlaubt
>-access to dn.regex="^cn=([^,]+),cn=(groupName|sid|gid|gidNumber|mac|uidNumber),cn=temporary,cn=univention,@%@ldap/base@%@$$" filter="objectClass=lock" attrs="entry,@univentionObject,@lock"
>+access to dn.regex="^cn=([^,]+),cn=(mailPrimaryAddress|groupName|sid|gid|gidNumber|mac|uidNumber),cn=temporary,cn=univention,@%@ldap/base@%@$$" filter="objectClass=lock" attrs="entry,@univentionObject,@lock"
> 	by set="([ldap:///]+user/entryDN+[?entryDN?base?%28%7C%28objectClass%3DucsschoolTeacher%29%28objectClass%3DucsschoolAdministrator%29%28objectClass%3DucsschoolStaff%29%29])/ucsschoolSchool" write
> 	by * +0 break
> 
>-access to dn.regex="^cn=(groupName|sid|gid|gidNumber|mac|uidNumber),cn=temporary,cn=univention,@%@ldap/base@%@$$" attrs=children,entry
>+access to dn.regex="^cn=(mailPrimaryAddress|groupName|sid|gid|gidNumber|mac|uidNumber),cn=temporary,cn=univention,@%@ldap/base@%@$$" attrs=children,entry
> 	by set="([ldap:///]+user/entryDN+[?entryDN?base?%28%7C%28objectClass%3DucsschoolTeacher%29%28objectClass%3DucsschoolAdministrator%29%28objectClass%3DucsschoolStaff%29%29])/ucsschoolSchool" write
> 	by * +0 break
> 
>diff --git a/ucs-school-ldap-acls-master/70ucsschool-ldap-acls-master.inst b/ucs-school-ldap-acls-master/70ucsschool-ldap-acls-master.inst
>index 3e63eacd4..5e080a20a 100755
>--- a/ucs-school-ldap-acls-master/70ucsschool-ldap-acls-master.inst
>+++ b/ucs-school-ldap-acls-master/70ucsschool-ldap-acls-master.inst
>@@ -31,7 +31,7 @@
> 
> ## joinscript api: bindpwdfile
> 
>-VERSION=17
>+VERSION=18
> . /usr/share/univention-join/joinscripthelper.lib
> . /usr/share/univention-lib/ldap.sh
> joinscript_init

Actions: View | Diff

Attachments on bug 52215: 10516