freeipa

#4321 [RFE] Clone sudo and hbac rules
Opened by sakodak. Modified

Open
Close Issue

Sometimes we have to create many similar rules. We're also trying to push as much user management as we can to the help desk. In order to make it easy on help desk folks (and new admins) we'd like to be able to clone HBAC and sudo rules (and anything else that makes sense) similar to how one can clone kickstarts in Spacewalk/Satellite.

Is this a UI only capability or you need the CLI support too?

What came to mind is ability to select the rule and click a new button in the UI, something like "Add a new using this...", it will act as add button but will prefill everything other than the name of the rule with the data from another rule. Is this the functionality you are looking for or something else?

What you've described here is exactly what I was thinking of. With the CLI I can almost do this already with just a little bit of scripting.

Thanks. Changing the component to Web UI as this is mainly focused on Web UI capability.

Scoped as minor feature in 4.1.

The FreeIPA 4.2 was already shaped (see [[milestone:FreeIPA 4.2]] milestone), this does not fit. Pushing out.

If anyone is willing to help and contribute to this one, please let us know!

Metadata Update from @sakodak:
- Issue assigned to someone
- Issue set to the milestone: Future Releases

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1654633 (was: todo)

Issue linked to bug 1654633
Metadata
None
None
None
Normal
enhancement
Web UI
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.