[Freeipa-devel] [PATCH] 822 remove deny hbac rule type

Martin Kosek mkosek at redhat.com
Fri Jul 15 14:18:08 UTC 2011


On Thu, 2011-07-07 at 12:01 -0400, Rob Crittenden wrote:
> Rob Crittenden wrote:
> > Remove deny from the available type options and prevent new ones from
> > being created (either directly or via a mod).
> >
> > Type now defaults to allow and will autofill so on the cli the user
> > won't be prompted for it in interactive mode.
> >
> > deny is still a valid type for searching, so hbacrule-find --type=deny
> > works.
> >
> > ticket https://fedorahosted.org/freeipa/ticket/1432
> >
> > rob
> 
> I forgot to include an updated API.txt in the change.
> 
> I tested with an old client and it does the right thing if you try to 
> create a deny rule. The API change affects only validation so I don't 
> need to bump up the version.
> 
> rob

ACK, works fine.

Martin




More information about the Freeipa-devel mailing list