search

rra / wallet

Secure data management system
https://www.eyrie.org/~eagle/software/wallet/
Other
5 stars 6 forks source link

"Explode" member listings for nested ACLs #78

Open macrotex opened 4 years ago

macrotex commented 4 years ago

When "show"ing a wallet object which has a nested ACL, you see something like this:

              Type: password
           Name: testing
          Owner: ADMIN
        Get ACL: test-nested
      Store ACL: ADMIN
     Created by: user@example.com
   Created from: 1.1.1.1
     Created on: 2020-02-13 21:38:57
      Stored by: user@example.com
    Stored from: 1.1.1.1
      Stored on: 2020-02-13 21:49:05

Members of ACL ADMIN (id: 1) are:
  krb5 user@example.com

Members of ACL test-nested (id: 9) are:
  nested group/test1
  nested group/test2

However, is is often the case that I want to see not just the members of the group but the members of the members, and so on down:

              Type: password
           Name: testing
          Owner: ADMIN
        Get ACL: test-nested
      Store ACL: ADMIN
     Created by: user@example.com
   Created from: 1.1.1.1
     Created on: 2020-02-13 21:38:57
      Stored by: user@example.com
    Stored from: 1.1.1.1
      Stored on: 2020-02-13 21:49:05

Members of ACL ADMIN (id: 1) are:
  krb5 user@example.com

Members of ACL test-nested (id: 9) are:
  nested group/test1
    krb5 user@example.com
    krb5 user2@example.com
  nested group/test2
    krb5 user2@example.com
    krb5 user3@example.com

It would be helpful if there was an option to show this expanded list.

ljl-geek commented 4 years ago

A '-e' option for showing extended ACLs would be a handy way to show the nesting.