Zimbra

stalker · #1 (**permalink**) 11-22-2011, 10:25 PM

Hello Guys,

I've edited /opt/zimbra/data/ldap/config/cn=config/cn=schema/cn={3}zimbra.ldif file and added some custom attribute in account object. I've wrote an admin extension which adds a new tab in account edit page contains the new attributes.

All the operation works fine like add,edit and delete account. The values of the new attributes gets updated and works like a charm.

Now, I created a new domain admin user and added a grant -set.account.zimbraIsDelegatedAdminAccount to deny.

I've logged in with domain admin user and when I edit any user. I can edit other attributes of account but not my custom attributes.

Can anybody tell me what is wrong with it? And what if I want to make my custom attributes editable and works like normal attributes even if the set.account.zimbraIsDelegatedAdminAccount is deny.

Thank You!

--stalker.

yutaka · #2 (**permalink**) 12-05-2011, 12:13 PM

I am not quite sure why&how you did add a grant -set.account.zimbraIsDelegatedAdminAccount to deny.
(Are you trying this on ZCS7,right?)

But for making your custom attributes editable for a domain admin,
how about allowing set.account.<your custom attribute> to the domain admin account?

stalker · #3 (**permalink**) 12-05-2011, 08:48 PM

Quote:

Originally Posted by yutaka

I am not quite sure why&how you did add a grant -set.account.zimbraIsDelegatedAdminAccount to deny.
(Are you trying this on ZCS7,right?)

But for making your custom attributes editable for a domain admin,
how about allowing set.account.<your custom attribute> to the domain admin account?

Yup, that exactly what we tried but we had problem that when we try to add our custom attribute, zimbra was giving error that "No such attribute in account". Then we found that we forgot to set a flag which allow domain admin to edit those attributes. So, we changed /opt/zimbra/conf/attrs/zimbra-attrs.xml file and everything worked.