[Freeipa-devel] [PATCH] Update of update

[Kevin McCarthy]

Richard Megginson wrote:
> Kevin McCarthy wrote:
>> Rob Crittenden wrote:
>>   
>>> Pull some of the logic into the server-side. Change update_user to take a 
>>> User object and do the conversion to a dict internally instead.
>>>
>>> Don't allow the User object to use __setattr__ except for dn and data. We 
>>> want them to use setValue() or setValues() so the cidict is used.
>>>
>>> The ipa-usermod tool is updated to use the new API.
>>>     
>>
>> Rob and I discussed this over IRC.  This introduces a subtle change in
>> how updates work - old unchanged values will end up overwriting a value
>> someone else may have updated "in the middle".
>
> Do you need some sort of guarantee that the entry has not changed between 
> the time it is searched for and displayed to the user, and the time its 
> updates are submitted?

I don't know if we need that guarantee or not.  At the least, however,
we shouldn't overwrite values a person didn't change.  I'm fine with
'last-change' wins policy - on an attribute level - but the team may
have a different opinion.

-Kevin

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2228 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070820/73edf2d9/attachment.bin>