Scott Serr via FreeIPA-users wrote:
Two parts to this question:
Is there a way to disable a normal user's ability to modify their
attributes like their name?
ipa help selfservice
And along those lines, is there a convenient way to reduce what a
normal
user sees of other users (via web and cli)?
What specifically are you looking for?
You might want to start with:
ipa permission-show 'System: Read User Addressbook Attributes'
rob