[Freeipa-devel] URI in HBAC - design page

[Martin Kosek]

On 03/24/2016 10:24 AM, Jan Pazdziora wrote:
> On Wed, Mar 23, 2016 at 04:41:49PM +0100, Lukáš Hellebrandt wrote:
...
> You present two solutions to the problem -- deny rules, and regular
> expressions.

For the record, HBAC deny rules is something we will want to avoid. Deny HBAC
rules were removed in the past for good reasons:

https://www.redhat.com/archives/freeipa-users/2011-June/msg00256.html
https://fedorahosted.org/freeipa/ticket/1432

Martin