freeipa

#9594 topologysegment commands cannot be delegated
Closed: fixed by rcritten. Opened by rcritten.

Closed: fixed
Reopen Issue

Issue

There are no permissions defined for topologysegment commands so they cannot be delegated to a user not in the admins group.

Steps to Reproduce

  1. Add a user to the 'Security Architect' role (has Replication Administrators privilege)
  2. kinit as the user
  3. ipa topologysegment-find domain

Actual behavior

No topology is shown

Expected behavior

Topology for domain and ca suffixes are visible.

PR: https://github.com/freeipa/freeipa/pull/7347

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-37285

master:

  • 6fc35156d91ce2265f02ed12224bce08c21b99e6 Add permissions for topologysegment

ipa-4-11:

  • d29eb6dc2a5c1eb7cf3985ed2f06657612f5fa40 Add permissions for topologysegment

ipa-4-10:

  • a51a51f9ecdec2311ce9ded46859638cee7ad33f Add permissions for topologysegment

ipa-4-9:

  • dc9833215327c1bdb58061b61b0ec68c9343ecb9 Add permissions for topologysegment

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 6b26a4ebd4c9d935fa283d85ff177249d530e703 Add iparepltopoconf objectclass to topology permissions

ipa-4-12:

  • ebccaac3cf8a5688739d76426924469d5b4df6b1 Add iparepltopoconf objectclass to topology permissions

ipa-4-11:

  • 15dde65451e26470fe928540a4e1e31546f55f49 Add iparepltopoconf objectclass to topology permissions

ipa-4-10:

  • bbe5e18166f06cc2c9d89522221d0cd7562330b4 Add iparepltopoconf objectclass to topology permissions

ipa-4-9:

  • 16a8aa02e6c547ee986490eb091652e0a1f51bf2 Add iparepltopoconf objectclass to topology permissions

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-37285, https://issues.redhat.com/browse/RHEL-46605 (was: https://issues.redhat.com/browse/RHEL-37285)

Metadata Update from @rcritten:
- Custom field changelog adjusted to RBAC have been added to read, modify, add and remove replication topology segments.
Metadata
None
None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.