[Freeipa-devel] [PATCH] 0058 Prevent deletion of the last admin

[Rob Crittenden]

Petr Viktorin wrote:
> On 06/05/2012 11:43 PM, Rob Crittenden wrote:
>> Petr Viktorin wrote:
>>> Raise an error when trying to delete the last user from the 'admins'
>>> group
>>>
>>> The 'admin' group name seems like something that shouldn't be hardcoded,
>>> but that's how it's done in the webui and some of our ACIs, and I don't
>>> see another solution short of adding a new attribute.
>>>
>>>
>>> https://fedorahosted.org/freeipa/ticket/2564
>>>
>>
>> This looks ok, I think it should go further and prevent the last member
>> to be removed from the admins group too.
>>
>> rob
>
> This updated patch prevents that, plus removing the admins group itself.
>
>

ACK, pushed to master.

rob