[Freeipa-devel] [PATCH] 0058 Prevent deletion of the last admin

[Rob Crittenden]

Petr Viktorin wrote:
> Raise an error when trying to delete the last user from the 'admins'
> group
>
> The 'admin' group name seems like something that shouldn't be hardcoded,
> but that's how it's done in the webui and some of our ACIs, and I don't
> see another solution short of adding a new attribute.
>
>
> https://fedorahosted.org/freeipa/ticket/2564
>

This looks ok, I think it should go further and prevent the last member 
to be removed from the admins group too.

rob