[Freeipa-devel] [PATCH] 528 make some hbac options mutually exclusive

[Rob Crittenden]

If an HBAC category is 'all' don't allow individual objects to be added.

Basically, make 'all' mutually exclusive. This makes debugging lots 
easier. If say usercat='all' there is no point adding specific users to 
the rule because it will always apply to everyone.

ticket 164

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-528-hbac.patch
Type: text/x-patch
Size: 9282 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20100914/d0351e9d/attachment.bin>