On 1/20/20 2:06 AM, John Louis via FreeIPA-users wrote:
> Hi, when a new user is created, she is assigned to the default
> "ipausers" group. But she can:
>
> 1. see the list of all users, at
https://server/ipa/ui/#/e/user/search
>
> 2. see all the details of any other users, at
>
https://server/ipa/ui/#/e/user/details/another_user
>
Hi,
points 1 and 2 are working as expected by design. Users are POSIX users
and expected to be visible. Please see:
https://pagure.io/freeipa/issue/7204
flo
> 3. for herself, she sees too many info that maybe nobody needs, such
> as "Car License", in her own landing page
>
> Is it possible to:
>
> A. prevent normal users to see 1. and 2. above
>
> B. customize to remove items not needed in 3. above
>
> ?
>
> I checked, looks like:
>
> A. even though we can configure some Roles, Privileges, Permissions,
> they are all system admins' elevated permissions. There is no way to
> remove permission from "ipausers".
>
> B. we can configure to disallow users to modify her "Car License" etc,
> BUT I found no way to not show that item in her landing page.
>
> I googled but can't find anything on the above. Would you help?
>
Doing #3 would require changes to the UI itself which would mean
changing some javascript if you're up to it.
rob