From 49fde3b047e63a549774a3354138102608855d77 Mon Sep 17 00:00:00 2001
From: Petr Vobornik <pvoborni@redhat.com>
Date: Fri, 10 Oct 2014 10:35:30 +0200
Subject: idviews: error out if appling Default Trust View on hosts

https://fedorahosted.org/freeipa/ticket/4615

Reviewed-By: Martin Kosek <mkosek@redhat.com>
---
 ipalib/plugins/idviews.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ipalib/plugins/idviews.py b/ipalib/plugins/idviews.py
index 1ae1709a1..bfa8675fb 100644
--- a/ipalib/plugins/idviews.py
+++ b/ipalib/plugins/idviews.py
@@ -240,6 +240,12 @@ class baseidview_apply(LDAPQuery):
             # the ipaAssignedIDView to None
             view_dn = None
 
+        if view == 'Default Trust View':
+            raise errors.ValidationError(
+                name=_('ID View'),
+                error=_('Default Trust View cannot be applied on hosts')
+            )
+
         completed = 0
         succeeded = {'host': []}
         failed = {
-- 
cgit