[Freeipa-devel] [PATCH] 303 Add range safety check for range_mod and range_del

[Martin Kosek]

range_mod and range_del command could easily create objects with
ID which is suddenly out of specified range. This could cause issues
in trust scenarios where range objects are used for computation of
remote IDs.

Add validator for both commands to check if there is any object with
ID in the range which would become out-of-range as a pre_callback.
Also add unit tests testing this new validator.

https://fedorahosted.org/freeipa/ticket/2919
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-303-add-range-safety-check-for-range_mod-and-range_del.patch
Type: text/x-patch
Size: 13743 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20120905/ea52d100/attachment.bin>