[Freeipa-devel] [PATCH] 0047 Do not use extra command options in ACI, permission, selfservice

Martin Kosek mkosek at redhat.com
Mon May 14 08:00:56 UTC 2012


On Thu, 2012-05-10 at 13:07 +0200, Petr Viktorin wrote:
> This is the second and likely the next-to-last part of disabling extra 
> command options (after this it's just test fixes and turning the 
> checking on).
> 
> Part of the work for https://fedorahosted.org/freeipa/ticket/2509
> 

This patch looks and works OK. I just think you missed a pkey_only
attribute for aci_find command. pkey_only is being passed to aci_find
command by selfservice_find and delegation_find commands and it would
fail in the hardened tests because it is not defined in aci_find command
as it is not based on LDAPSearch class but crud.Search.

It just needs to be added to aci_find command and it should be fine.

Martin




More information about the Freeipa-devel mailing list