summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRichard Ipsum <richard.ipsum@codethink.co.uk>2014-02-05 15:50:52 +0000
committerDaniel Silverstone <dsilvers@digital-scurf.org>2014-03-06 15:08:49 +0000
commit0e8905a9fd69eb481cb74a45447d2e8f6277c420 (patch)
tree61ccd43b9d90d00cff46fc0aa2373c4212c5f07b
parentbf14dd6e4936dd19b199f7fa92ec5075a551fbf0 (diff)
downloadgitano-0e8905a9fd69eb481cb74a45447d2e8f6277c420.tar.gz
Update ruleset
Allow users to change their own password
-rw-r--r--skel/gitano-admin/rules/defines.lace3
-rw-r--r--skel/gitano-admin/rules/selfchecks.lace2
2 files changed, 4 insertions, 1 deletions
diff --git a/skel/gitano-admin/rules/defines.lace b/skel/gitano-admin/rules/defines.lace
index e72f598..95e729e 100644
--- a/skel/gitano-admin/rules/defines.lace
+++ b/skel/gitano-admin/rules/defines.lace
@@ -9,7 +9,8 @@ define if_asanother as_user ~.
# Self-related operations
define op_whoami operation whoami
define op_sshkey operation sshkey
-define op_self anyof op_whoami op_sshkey
+define op_passwd operation passwd
+define op_self anyof op_whoami op_sshkey op_passwd
# Admin-related operations
diff --git a/skel/gitano-admin/rules/selfchecks.lace b/skel/gitano-admin/rules/selfchecks.lace
index 300bb91..e30e557 100644
--- a/skel/gitano-admin/rules/selfchecks.lace
+++ b/skel/gitano-admin/rules/selfchecks.lace
@@ -3,3 +3,5 @@
allow "You may ask who you are" op_whoami
allow "You may manage your own ssh keys" op_sshkey
+
+allow "You may change your own password" op_passwd