[Freeipa-devel] [PATCH] 822 remove deny hbac rule type

Rob Crittenden rcritten at redhat.com
Thu Jul 7 16:01:38 UTC 2011


Rob Crittenden wrote:
> Remove deny from the available type options and prevent new ones from
> being created (either directly or via a mod).
>
> Type now defaults to allow and will autofill so on the cli the user
> won't be prompted for it in interactive mode.
>
> deny is still a valid type for searching, so hbacrule-find --type=deny
> works.
>
> ticket https://fedorahosted.org/freeipa/ticket/1432
>
> rob

I forgot to include an updated API.txt in the change.

I tested with an old client and it does the right thing if you try to 
create a deny rule. The API change affects only validation so I don't 
need to bump up the version.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-rcrit-822-2-hbacrule-deny.patch
Type: text/x-diff
Size: 7347 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20110707/728a649d/attachment.bin>


More information about the Freeipa-devel mailing list