Re: [Freeipa-devel] [PATCH] 0053 Disallow setattr on no_update/no_create params

2012-05-29 Thread Martin Kosek
On Mon, 2012-05-21 at 13:58 +0200, Petr Viktorin wrote: Only use no_create/no_update for things we really don't want the user to change (even through setattr). This is stuff like ipacertificatesubjectbase. Make --{set,add,del}attr refuse to modify these params. For things we just don't

[Freeipa-devel] [PATCH] 0053 Disallow setattr on no_update/no_create params

2012-05-21 Thread Petr Viktorin
Only use no_create/no_update for things we really don't want the user to change (even through setattr). This is stuff like ipacertificatesubjectbase. Make --{set,add,del}attr refuse to modify these params. For things we just don't advertise in the because there's a different way to do change