diff options
author | Rob Crittenden <rcritten@redhat.com> | 2010-12-21 22:39:55 -0500 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2011-01-10 10:27:23 -0500 |
commit | 0a79836082b897ebf734d9073583769cb276937c (patch) | |
tree | 3269cf575f989df3ba9b88f13e0be70982018ebf /ipalib/plugins/selfservice.py | |
parent | c69f4d0fed05a355ae5b9168066ad0ad01eb6487 (diff) | |
download | freeipa-0a79836082b897ebf734d9073583769cb276937c.tar.gz freeipa-0a79836082b897ebf734d9073583769cb276937c.tar.xz freeipa-0a79836082b897ebf734d9073583769cb276937c.zip |
Setting an empty set of target attributes should raise an exception.
It is possible to create an ACI with attributes and then try to set that
to None via a mod command later. We need to catch this and raise an exception.
If all attributes are set to None in an aci then the attr target is removed
from the ACI. This could result in an illegal ACI if there are no other
targets. Having no targets is a legal state, just not a legal final state.
ticket 647
Diffstat (limited to 'ipalib/plugins/selfservice.py')
-rw-r--r-- | ipalib/plugins/selfservice.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/ipalib/plugins/selfservice.py b/ipalib/plugins/selfservice.py index 9152895a5..b5f754ee8 100644 --- a/ipalib/plugins/selfservice.py +++ b/ipalib/plugins/selfservice.py @@ -157,6 +157,8 @@ class selfservice_mod(crud.Update): def execute(self, aciname, **kw): is_selfservice(aciname) + if 'attrs' in kw and kw['attrs'] is None: + raise errors.RequirementError(name='attrs') result = api.Command['aci_mod'](aciname, **kw)['result'] return dict( result=result, |