diff options
| -rw-r--r-- | ipalib/plugins/permission.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py index d003bcab..deb069d3 100644 --- a/ipalib/plugins/permission.py +++ b/ipalib/plugins/permission.py @@ -883,7 +883,9 @@ class permission_mod(baseldap.LDAPUpdate): # it cannot be used directly to generate an ACI. # First we need to copy the original data into it. for key, value in old_entry.iteritems(): - if key not in options and key != 'cn': + if (key not in options and + key != 'cn' and + key not in self.obj.attribute_members): entry.setdefault(key, value) if not entry.get('ipapermlocation'): |