URL:
https://github.com/SSSD/sssd/pull/908
Author: pbrezina
Title: #908: ifp: implement connection-wide access check
Action: opened
PR body:
"""
Currently only a small subset of infopipe methods performed access check.
This change makes sure that we do this check global for everything.
Steps to reproduce:
1. Call an infopipe method as a user not-listed in [ifp] allowed_uids
2. Without the patch the access is granted
E.g.
```
$ dbus-send --print-reply --system --dest=org.freedesktop.sssd.infopipe
/org/freedesktop/sssd/infopipe/Users org.freedesktop.sssd.infopipe.Users.FindByName
string:user-1
```
Resolves:
https://pagure.io/SSSD/sssd/issue/4105
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/908/head:pr908
git checkout pr908