[Freeipa-devel] [PATCH] 528 make some hbac options mutually exclusive

[Dmitri Pal]

Rob Crittenden wrote:
> If an HBAC category is 'all' don't allow individual objects to be added.
>
> Basically, make 'all' mutually exclusive. This makes debugging lots
> easier. If say usercat='all' there is no point adding specific users
> to the rule because it will always apply to everyone.
>
> ticket 164
>
>

Comparison to 'all' should be case insensitive.
I do not know Python syntax but from general experience I assume it is a
NACK.

> rob
> ------------------------------------------------------------------------
>
> _______________________________________________
> Freeipa-devel mailing list
> Freeipa-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-devel


-- 
Thank you,
Dmitri Pal

Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/