URL: https://github.com/freeipa/freeipa/pull/617
Title: #617: Allow renaming of sudo and HBAC rules

stlaz commented:
The latest patch removes the `rdn_is_private_key` attribute, replaces it with 
`allow_rename` which actually says correctly what's happening. Also, the 
decision whether primary key is in RDN is decided on checking whether the 
primary key is in RDN rather than on anything else.
Also added a comment explaining that the `modrdn` operation is performed also 
when `setattr` is doing changes to the primary key + RDN because it was far 
from obvious in the code.

See the full comment at 
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to