[Freeipa-devel] Order of updates

[Rob Crittenden]

We've had a few problems with permissions come up over the last couple 
of months and I finally sat down to identify what the problem is (this 
can be seen sometimes where some unit tests fail).

We do some membership manipulation in the updates and there is a task 
which should fix up memberOf. The problem is that that the updates get 
added AFTER the update is executed because of the way the sorting is done.

There isn't an easy way to make the task DN deeper (I tried), so we need 
something a bit more clever.

My ideas include:

- Changing 55-pbacmemberof.update into a POST update plugin
- Modifying the way update files are loaded so we apply them in blocks, 
say 0-89 are all applied, then 90-* are applied.
- Adding a new update subdirectory which is applied after the main updates.

I'm favoring #2 right now but suspect it could get confusing.

This is ticket https://fedorahosted.org/freeipa/ticket/3377