Re: [Freeipa-devel] [PATCH] 0067 Explicitly filter options that permission-{add, mod} passes to aci-{add, mod}

2012-07-01 Thread Martin Kosek
On 06/29/2012 02:57 PM, Alexander Bokovoy wrote: > On Fri, 29 Jun 2012, Petr Viktorin wrote: >> The permission commands were not filtering their options properly before >> passing them to the underlying ACI commands. This upset the new input >> validation when --addattr/--setattr was used. >> >> Th

Re: [Freeipa-devel] [PATCH] 0067 Explicitly filter options that permission-{add, mod} passes to aci-{add, mod}

2012-06-29 Thread Alexander Bokovoy
On Fri, 29 Jun 2012, Petr Viktorin wrote: The permission commands were not filtering their options properly before passing them to the underlying ACI commands. This upset the new input validation when --addattr/--setattr was used. This patch adds a filter that only lets options listed in aci_

[Freeipa-devel] [PATCH] 0067 Explicitly filter options that permission-{add, mod} passes to aci-{add, mod}

2012-06-29 Thread Petr Viktorin
The permission commands were not filtering their options properly before passing them to the underlying ACI commands. This upset the new input validation when --addattr/--setattr was used. This patch adds a filter that only lets options listed in aci_attributes through to the ACI commands. h