diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-06-09 19:29:55 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-06-11 13:21:28 +0200 |
| commit | 52a4b54635cca57ac19fb7f4dfa6031001ab925b (patch) | |
| tree | 37617219b7505cc266b0c292f4e92529ae396000 /ipalib/plugins/permission.py | |
| parent | 36c5ba9d27c53e97d1185f38d4b17faac050e19f (diff) | |
| download | freeipa-52a4b54635cca57ac19fb7f4dfa6031001ab925b.tar.gz freeipa-52a4b54635cca57ac19fb7f4dfa6031001ab925b.tar.xz freeipa-52a4b54635cca57ac19fb7f4dfa6031001ab925b.zip | |
permission plugin: Sort rights when writing the ACI
This makes the ACI independent on set/dict iteration order.
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipalib/plugins/permission.py')
| -rw-r--r-- | ipalib/plugins/permission.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py index 5a22acdb6..814bf191b 100644 --- a/ipalib/plugins/permission.py +++ b/ipalib/plugins/permission.py @@ -550,7 +550,7 @@ class permission(baseldap.LDAPObject): raise ValueError(ipapermbindruletype) aci_parts.append('(version 3.0;acl "permission:%s";allow (%s) %s;)' % ( - name, ','.join(entry['ipapermright']), bindrule)) + name, ','.join(sorted(entry['ipapermright'])), bindrule)) return ''.join(aci_parts) |