ACI: allow access to attribute through all valid names(aliases)

[389-ds-bot]

Cloned from Pagure issue: https://pagure.io/389-ds-base/issue/48042

• Created at 2015-02-24 21:22:51 by pvoborni
• Assigned to nobody

---

From FreeIPA ticket [4913] and related https://fedorahosted.org/freeipa/ticket/4883 4883

Currently FreeIPA ACIs only mention a single attribute name, ignoring its aliases. It would be better to allow access to an attribute through all valid names. Not sure where such request should end up -- in ACL plugin in 389-ds or in direct ACI rules in FreeIPA.

[389-ds-bot]

Comment from nhosoi (@nhosoi) at 2015-04-10 23:42:57

Can we move the target milestone to 1.3.5?

[389-ds-bot]

Comment from nhosoi (@nhosoi) at 2016-05-13 00:19:53

Per triage, push the target milestone to 1.3.6.

[389-ds-bot]

Comment from nhosoi (@nhosoi) at 2017-02-11 23:04:06

Metadata Update from @nhosoi:

• Issue set to the milestone: 1.3.6.0

[389-ds-bot]

Comment from mreynolds (@mreynolds389) at 2017-05-08 22:28:09

Metadata Update from @mreynolds389:

• Custom field component reset (from Security - Access Control (ACL))
• Issue close_status updated to: None
• Issue set to the milestone: 1.4 backlog (was: 1.3.6.0)

[389-ds-bot]

Comment from mreynolds (@mreynolds389) at 2020-05-27 21:31:58

Metadata Update from @mreynolds389:

• Custom field reviewstatus adjusted to None
• Issue set to the milestone: 1.4.5 (was: 1.4 backlog)
• Issue tagged with: Access Control

[mreynolds389]

Won't fix, no demand and could be complicated