[Freeipa-devel] [PATCH] 440 add groups of services to hbac

[Pavel Zuna]

On 05/14/2010 03:40 PM, Rob Crittenden wrote:
> Replace serviceName with memberService so we can assign individual
> services or groups of services to an HBAC rule.
>
> rob
>

Why is there a custom get_dn() in hbacsvcgroup? If the primary_key (cn) is part 
of the object DN, there is not need to override it. But that's just a detail - 
it doesn't hurt anything.

ACK.

Pavel