summaryrefslogtreecommitdiffstats
path: root/ipalib/errors.py
diff options
context:
space:
mode:
authorTomas Babej <tbabej@redhat.com>2012-09-25 08:14:57 -0400
committerMartin Kosek <mkosek@redhat.com>2012-10-03 13:22:46 +0200
commit682edbf2152aa2dce2f6350226bffc6ebc2526c1 (patch)
treeaa5f37cdc88bd3e16242bbdf8ebc4390705a7710 /ipalib/errors.py
parentbdf5f464d7e982759b460ac36af72bf0e3cfaf3b (diff)
downloadfreeipa-682edbf2152aa2dce2f6350226bffc6ebc2526c1.tar.gz
freeipa-682edbf2152aa2dce2f6350226bffc6ebc2526c1.tar.xz
freeipa-682edbf2152aa2dce2f6350226bffc6ebc2526c1.zip
Restrict admins group modifications
Group-mod command no longer allows --rename and/or --external changes made to the admins group. In such cases, ProtectedEntryError is being raised. https://fedorahosted.org/freeipa/ticket/3098
Diffstat (limited to 'ipalib/errors.py')
-rw-r--r--ipalib/errors.py6
1 files changed, 3 insertions, 3 deletions
diff --git a/ipalib/errors.py b/ipalib/errors.py
index 31fc14ea4..7bf267290 100644
--- a/ipalib/errors.py
+++ b/ipalib/errors.py
@@ -1659,18 +1659,18 @@ class LastMemberError(ExecutionError):
class ProtectedEntryError(ExecutionError):
"""
- **4309** Raised when an entry being deleted is protected
+ **4309** Raised when an entry being deleted or modified in a forbidden way is protected
For example:
>>> raise ProtectedEntryError(label=u'group', key=u'admins', reason=_(u'privileged group'))
Traceback (most recent call last):
...
- ProtectedEntryError: group admins cannot be deleted: privileged group
+ ProtectedEntryError: group admins cannot be deleted/modified: privileged group
"""
errno = 4309
- format = _('%(label)s %(key)s cannot be deleted: %(reason)s')
+ format = _('%(label)s %(key)s cannot be deleted/modified: %(reason)s')
##############################################################################