On Wed, 2014-05-28 at 16:27 +0200, Petr Viktorin wrote:
> Simo, I hazily remember discussing that we should only allow specific 
> attributes on add, otherwise users can add entries with any extra 
> objectclasses and attributes. Did we come to a conclusion?
> I might have confused targetattr with targetattrfilter in my notes; 
> since I see targetarr is ineffective.
Yes we need to restrict at least the allowed objectclasses I think.


Freeipa-devel mailing list

Reply via email to