Permission to allow user to list DNS zones

[John Petrini]

Hello List,

Can anyone give me some guidance on how to create a permission that allows
a user to list (search) DNS zones? I know how to setup per-zone permissions
using dnszone-add-permission but in this case I just want the user to be
able to get a list of zones, not modify individual zones.

Thanks,

John

[Rob Crittenden]

John Petrini via FreeIPA-users wrote:
>  Hello List,
>  
>  Can anyone give me some guidance on how to create a permission that
>  allows a user to list (search) DNS zones? I know how to setup per-zone
>  permissions using dnszone-add-permission but in this case I just want
>  the user to be able to get a list of zones, not modify individual zones. 
There is no specific permission for DNS zones at the moment, it is all
or nothing provided by the permission "System: Read DNS Entries".

You could try creating your own if you want to limit visibility just to
the zones.

rob

[John Petrini]

I got so distracted trying to figure out how to create one I didn't notice
there's already one there. The Read DNS Entries permission was just what I
needed. Thanks!