diff options
| author | Tomas Babej <tbabej@redhat.com> | 2014-05-14 13:21:14 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-06-25 20:14:50 +0200 |
| commit | af2eb4d69506b641504d076e79b80c7ee54eeda9 (patch) | |
| tree | 94e5959d49b9daa1b775f578e16cee2015c03a13 | |
| parent | c7da22c1e69cb4d6cc8c6f368aad5ffddbd3762c (diff) | |
| download | freeipa-af2eb4d69506b641504d076e79b80c7ee54eeda9.tar.gz freeipa-af2eb4d69506b641504d076e79b80c7ee54eeda9.tar.xz freeipa-af2eb4d69506b641504d076e79b80c7ee54eeda9.zip | |
sudorule: Allow adding deny commands when command category set to ALL
https://fedorahosted.org/freeipa/ticket/4340
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
| -rw-r--r-- | ipalib/plugins/sudorule.py | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/ipalib/plugins/sudorule.py b/ipalib/plugins/sudorule.py index b3e71c8f9..95631a4b6 100644 --- a/ipalib/plugins/sudorule.py +++ b/ipalib/plugins/sudorule.py @@ -530,12 +530,6 @@ class sudorule_add_deny_command(LDAPAddMember): def pre_callback(self, ldap, dn, found, not_found, *keys, **options): assert isinstance(dn, DN) - try: - _entry_attrs = ldap.get_entry(dn, self.obj.default_attributes) - except errors.NotFound: - self.obj.handle_not_found(*keys) - if is_all(_entry_attrs, 'cmdcategory'): - raise errors.MutuallyExclusiveError(reason=_("commands cannot be added when command category='all'")) return dn |