[Freeipa-devel] [PATCH] 440 add groups of services to hbac

[Rob Crittenden]

Pavel Zuna wrote:
> On 05/14/2010 03:40 PM, Rob Crittenden wrote:
>> Replace serviceName with memberService so we can assign individual
>> services or groups of services to an HBAC rule.
>>
>> rob
>>
> 
> Why is there a custom get_dn() in hbacsvcgroup? If the primary_key (cn) 
> is part of the object DN, there is not need to override it. But that's 
> just a detail - it doesn't hurt anything.
> 
> ACK.
> 
> Pavel

Good catch, I meant to remove that. I'm going to push the patch as-is 
and submit a fix for this later this morning.

pushed to master

rob