Rob Crittenden wrote:
> If an HBAC category is 'all' don't allow individual objects to be added.
>
> Basically, make 'all' mutually exclusive. This makes debugging lots
> easier. If say usercat='all' there is no point adding specific users
> to the rule because it will always apply to everyone.
>
> ticket 164
>
>

Comparison to 'all' should be case insensitive.
I do not know Python syntax but from general experience I assume it is a
NACK.

> rob
> ------------------------------------------------------------------------
>
> _______________________________________________
> Freeipa-devel mailing list
> Freeipa-devel@redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-devel


-- 
Thank you,
Dmitri Pal

Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to