On Wed, 2014-05-28 at 16:27 +0200, Petr Viktorin wrote:
> Simo, I hazily remember discussing that we should only allow specific 
> attributes on add, otherwise users can add entries with any extra 
> objectclasses and attributes. Did we come to a conclusion?
> I might have confused targetattr with targetattrfilter in my notes; 
> since I see targetarr is ineffective.
> 
Yes we need to restrict at least the allowed objectclasses I think.

Simo.

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to