From 858ae2e6ffb11a2853e7bc0cdf5672fdc9d77fa6 Mon Sep 17 00:00:00 2001
From: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>
Date: Wed, 8 Jul 2015 00:46:27 +0300
Subject: model: disallow editing permission set

---
 aconf/model/aaa.lua | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/aconf/model/aaa.lua b/aconf/model/aaa.lua
index c642984..3f62ef0 100644
--- a/aconf/model/aaa.lua
+++ b/aconf/model/aaa.lua
@@ -1,5 +1,5 @@
 --[[
-Copyright (c) 2012-2014 Kaarle Ritvanen
+Copyright (c) 2012-2015 Kaarle Ritvanen
 See LICENSE file for license details
 --]]
 
@@ -78,7 +78,9 @@ Record.timestamp = M.time.Timestamp{editable=false}
 local Aaa = M.new()
 Aaa.users = M.Collection{type=User}
 Aaa.roles = M.Collection{type=Role}
-Aaa.permissions = M.Set{type=M.String, addr='/volatile/aaa/permissions'}
+Aaa.permissions = M.Set{
+   type=M.String, addr='/volatile/aaa/permissions', editable=false
+}
 Aaa.audit_trail = M.List{
    type=Record,
    addr=conf_addr..'/audit.json',
-- 
cgit v1.2.3