[Freeipa-devel] [PATCH] don't allow special groups to be removed

[Karl MacMillan]

On Fri, 2007-11-30 at 15:23 -0500, Simo Sorce wrote:
> On Fri, 2007-11-30 at 14:58 -0500, Karl MacMillan wrote:
> > It's definitely a security issue - stripping admins of all admin
> > rights
> > as a regular user is definitely a problem. Perhaps the acis already
> > cover that case though?
> 
> A regular can do nothing, only admins can add/delete entries.
> 

Objection withdrawn then - sorry Rob.

Karl