From 2e80645ef21ff6dbcc1645caacda02e8aac8226a Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Tue, 14 Jul 2015 18:04:33 +0200 Subject: fix hbac rule search for non-admin users hbacrule has it default attributes (which are used in search) attribute 'memberhostgroup'. This attr is not in ACI nor in schema. If the search contains an attribute which can't be read then the search won't return anything. Therefore all searches with filter set fail. https://fedorahosted.org/freeipa/ticket/5130 Reviewed-By: Martin Basti --- ipalib/plugins/hbacrule.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ipalib/plugins/hbacrule.py b/ipalib/plugins/hbacrule.py index 34bdc9bdf..82a52bd80 100644 --- a/ipalib/plugins/hbacrule.py +++ b/ipalib/plugins/hbacrule.py @@ -124,7 +124,7 @@ class hbacrule(LDAPObject): 'description', 'usercategory', 'hostcategory', 'servicecategory', 'ipaenabledflag', 'memberuser', 'sourcehost', 'memberhost', 'memberservice', - 'memberhostgroup', 'externalhost', + 'externalhost', ] uuid_attribute = 'ipauniqueid' rdn_attribute = 'ipauniqueid' -- cgit