z-eos / umi Goto Github PK

to add associatedDomain to hold domains related to the org and for dyn. generation of the domains

something like this:

dn: ou=borg,ou=Organizations,dc=umidb
associateddomain: borg.startrek.in
businesscategory: space exploratory
businesscategory: assimilation
l: Unicomplex
objectclass: top
objectclass: organizationalUnit
objectclass: domainRelatedObject
ou: Borg
physicaldeliveryofficename: Unicomplex
postaladdress: to be added
postalcode: to be added
postofficebox: to be added
registeredaddress: to be added
st: to be added
street: to be added
telephonenumber: 060

I would like to see the Search-Simple filter by mac (94:de:80:10:03:60) as search advanced
dc=ibs; filter: cn=94de80100360

add userPKCS12 and sshPublicKey services

please, formalize pub key entity desired stuff

add to LDIF modal checkboxes:

• export to file
• export with/out system data

to add "collapse/expand all" button in searchby.tt
now default state of each row is collapsed if > 1, so we need to be able to expand all search result

Для передачи редактирования объектов в сторонние руки, портебуется контроль "версии" объекта - причесан ли он по текущему стандатру?
можно реализовать добавления к корневому объекту атрибута версии стандарта заполения (фио ревизора, даты ревизии, ...), изначально забить всем туда 0. В итоге можно будет провести ревизию объектов - проверены местным работником или нет.

to implement doc/umi-auth.png algorithm for UI element access (rendering) and relevant method access

to do that we need something like to add configuration for UI element and relevant method, somwhere into LDAP_CRUD->{'cfg'} attribute hash and to analyze whether the role allowed to access the issue (UI item and relevant method) during the call to it

it'd be great to do that somewhere in Controller/Root->auto () if possible instead of implementing the check each method call

С целью упрощения интерфейса первичного заведения юзера, стоит сделать чекбоксы таких сервисов как jabber, mail. Если требуется стандартное заведение, то домен будет совпадать с organisation и нет смысла это указыать несколько раз в разных местах, если нужно чтото "особенное", то милости просим обычным способом заполнять все по очереди

edit all for uid=U1408443894C9001-kathryn.janeway,ou=People,dc=umidb is broken!
sometimes it fails with:

[info] *** Request 6 (0.075/s) [62374] [Fri Oct 17 19:16:05 2014] ***
[debug] Path is "searchby/proc"
[debug] "POST" request for "searchby/proc" from "127.0.0.1"
[debug] Body Parameters are:

Parameter	Value
ldap_modify	uid=U1408443894C9001-kathryn.janeway,ou=People,dc=umidb

[debug] Found sessionid "5a95d0e3ae69a428f3167ba9b8b710ba4aeeeee6" in cookie
[debug] Restored session "5a95d0e3ae69a428f3167ba9b8b710ba4aeeeee6"
[debug] Rendering template "search/modify.tt"
[debug] Role granted: wheel
[debug] Role granted: wheel
[debug] Role granted: wheel
[debug] Role granted: wheel
[debug] Role granted: wheel
[debug] Role granted: wheel
[debug] At least one role granted: wheel skiioo-dev
[debug] Role granted: wheel
[debug] At least one role granted: wheel setup
[debug] Role granted: wheel
[error] Caught exception in engine "store_session: data too large"

Было бы неплохо иметь ссылку на только что созданный обьект. К примеру, после заведения корневого обьекта, в сообщении где нам сообщается пароль, мы видим ссылку на переход к этому самому обьекту, чтобы добавить например еще сервис и тд

to split /searchby/proc on separate methods where individual form is used

UMI::Form::ModJpegPhoto
UMI::Form::AddServiceAccount

while trying to modify
DN: cn=198.51.100.0, cn=ship01 DHCP Config, ou=headquarters, ou=starfleet, ou=DHCP, dc=umidb

the original
dhcpOption: domain-name "ship01.headquarters.starfleet.startrek.in"

in form shows only:
dhcpOption: domain-name

when new obj creation refused due to the existence of the same resource (login, F/Lname e.t.c.) I'd be great to provide link to the one

to check service account uniqueness while creation to avoid service logins doubling for different management accounts, like:

uid=[email protected],authorizedService=[email protected],uid=ALFA,ou=People,dc=umidb
uid=[email protected],authorizedService=[email protected],uid=BETA,ou=People,dc=umidb

UMI session timeouted doesn't redirect to sign-in page, it'd be great to not to do it by hands

org creation form has to create whole bundle of org data needed for each branch or leaf to avoid recursive search for data absent when we need to show org data (like for user preferences)

it means each org object must have all org data like:

• physicalDeliveryOfficeName
• postOfficeBox
• postalAddress
• postalCode
• registeredAddress
• l
• st
• street
• telephoneNumber
• associatedDomain

to do utf8::decode() for each attribute value according it's syntax type
https://tools.ietf.org/html/rfc2252#section-6.10

like this

$tmp = $entry->get_value( $attr, asref => 1 );
map { utf8::decode($_); $_} @{$tmp};
$init_obj->{$attr} = $#{$tmp} > 0 ? $tmp : $tmp->[0];

add an attribute for verbatim parts of the config to cover custom cases

search returns 0 when no results found, we need to handle it correctly rather than error notify
to produce try to search for unexistent object

on blocking, color tags remain same until page is reloaded by hands, so it's better to reload it by ajax

after LDIF was choosen and back from it, other modals (at least delete) stops working and redirects to LDIF ...

1. search by anything
2. choose LDIF
3. go back
4. choose delete

service accounts duplication control

to reconsider unique_uri usage

При заведении корневого обьекта, логин формируется автоматически на основе полей Фамилия и Имя, а не из поля login на вкладке Person