freeipa

#5138 [RFE] Create Sudo Commando Groups without creating singular Sudo Commands prior to grouping
Opened by pvoborni. Modified

Open
Close Issue

Based on user request.

The goal is to make sudo rule/command group/command easier.

One of proposals:

Extend Web UI dialog "Add Sudo Command Group" in following fashion.

+-------------------------------------------------------+
| Add Sudo Command Group                                |
|                                                       |
| Sudo command group: [ groupname                  ]    |
| Sudo command:       [ cmd1                       ]    |
|                     [ cmd2                       ]    |
|                     [ cmd3                       ] add|
| Description:        [                            ]    |
|                     [                            ]    |
|                                                       |
|                                   [add] [..] [cancel] |
+-------------------------------------------------------+

Which would be equivalent to:

  • ipa sudocmd-add cmd1
  • ipa sudocmd-add cmd2
  • ipa sudocmd-add cmd3
  • ipa sudocmdgroup-add groupname
  • ipa sudocmdgroup-add-member groupname --sudocmds={cmd1, cmd2, cmd3}

It might be even taken little bit further - to speedup creation of similar objects like sudo rules and roles.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1211360 (Red Hat Enterprise Linux 7)

It would be better to have UX design for creation of related objects, not just sudo. Similar request could be made for HBAC, RBAC. Something like a wizard which was proposed by Adam Y. couple years ago.

Metadata Update from @pvoborni:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog
Metadata
None
None
None
Normal
enhancement
Web UI
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.