On 1/20/20 2:06 AM, John Louis via FreeIPA-users wrote:
Hi, when a new user is created, she is assigned to the default
"ipausers" group. But she can:
1. see the list of all users, at
https://server/ipa/ui/#/e/user/search
2. see all the details of any other users, at
https://server/ipa/ui/#/e/user/details/another_user
Hi,
points 1 and 2 are working as expected by design. Users are POSIX users
and expected to be visible. Please see:
https://pagure.io/freeipa/issue/7204
flo
3. for herself, she sees too many info that maybe nobody needs, such
as "Car License", in her own landing page
Is it possible to:
A. prevent normal users to see 1. and 2. above
B. customize to remove items not needed in 3. above
?
I checked, looks like:
A. even though we can configure some Roles, Privileges, Permissions, they are all system
admins' elevated permissions. There is no way to remove permission from
"ipausers".
B. we can configure to disallow users to modify her "Car License" etc, BUT I
found no way to not show that item in her landing page.
I googled but can't find anything on the above. Would you help?
Thanks!
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...