Bug 51727 - Show value as read-only in UMC while still editable with UDM CLI
Show value as read-only in UMC while still editable with UDM CLI
Status: NEW
Product: UCS
Classification: Unclassified
Component: UDM - Extended Attributes
UCS 4.4
Other Linux
: P5 normal (vote)
: ---
Assigned To: UMC maintainers
UMC maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2020-07-24 12:16 CEST by Hendrik Peter
Modified: 2023-05-05 11:45 CEST (History)
6 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Hendrik Peter univentionstaff 2020-07-24 12:16:01 CEST
A feature request desired from multiple customers. 
Extended Attributes should have an option to make it non-changable, read-only through UMC, but still with the UDM CLI and its python modules library.

The mayChange Option disables the change function for both, UMC and UDM CLI.
Comment 1 Ingo Steuwer univentionstaff 2020-07-24 12:17:36 CEST
Do you have an example usecase?
Comment 2 Hendrik Peter univentionstaff 2020-08-10 11:35:50 CEST
(In reply to Ingo Steuwer from comment #1)
> Do you have an example usecase?

We have a customer that uses a custom import script (CSV) to import Users with extended attribute data. One of these extended attributes shall be visible inside the Users UMC module, but not editable. This script uses the python Univention module 'users/user' to create / update these Users based on the CSV data.

The mentioned mayChange Option to set this extended attribute to read-only inside UMC unfortunately also sets it to read-only for the mentioned python module.

---

A second customer has multiple values like a maximum mailbox usage quota for Users, that are handled by external services (dovecot) and shouldn't be writeable inside UMC. This customer needs to use two attributes per value to achieve this feature. 
The first attribute actually contains the data changable and is used to manage it (mayChange=1). The second one only exists to display the value inside the UMC module read-only (mayChange=0). An UDM handler needs to use LDAP to transfer the data to this attribute only for its UMC module display.

It would be great to have these attributes managable through the UDM python library and all its features, while still displayable inside the UMC module as read-only.