[Freeipa-devel] [PATCH] 52 Disallow deletion of global password policy

[Jan Cholasta]

Don't allow "ipa pwpolicy-del global_policy".

https://fedorahosted.org/freeipa/ticket/1936

Questions:

Is it possible to disallow deletion of specific objects on LDAP level 
instead?

The default HBAC rule, allow_all, can also be deleted - should it be 
disallowed too?

Honza

-- 
Jan Cholasta
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-jcholast-52-pwpolicy-del-global.patch
Type: text/x-patch
Size: 1036 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20111011/d9baaec7/attachment.bin>