[Freeipa-devel] [PATCH] 0053 Disallow setattr on no_update/no_create params

[Petr Viktorin]

Only use no_create/no_update for things we really don't want the user to 
change (even through setattr). This is stuff like ipacertificatesubjectbase.
Make --{set,add,del}attr refuse to modify these params.

For things we just don't advertise in the because there's a different 
way to do change them, there is the "no_option" flag  (undocumented 
before this patch). This only causes the option to be hidden from the 
CLI; XML-RPC will still happily take it (and it will appear in API.txt).
Use this for ipaenabledflag, nsacconuntlock, and externalhost.


https://fedorahosted.org/freeipa/ticket/2580

-- 
Petr³
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0053-Disallow-setattr-on-no_update-no_create-params.patch
Type: text/x-patch
Size: 36059 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20120521/9bb3cc82/attachment.bin>