From 4e207b4c889a79b3465aa670b3f2229e76e8abe9 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Thu, 6 Feb 2014 12:33:43 +0100 Subject: Remove sourcehostcategory from the default HBAC rule. https://fedorahosted.org/freeipa/ticket/4158 Reviewed-By: Martin Kosek --- install/share/default-hbac.ldif | 1 - ipalib/plugins/hbacrule.py | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/install/share/default-hbac.ldif b/install/share/default-hbac.ldif index b7b6ba284..52fd30ec9 100644 --- a/install/share/default-hbac.ldif +++ b/install/share/default-hbac.ldif @@ -7,7 +7,6 @@ cn: allow_all accessruletype: allow usercategory: all hostcategory: all -sourcehostcategory: all servicecategory: all ipaenabledflag: TRUE description: Allow all users to access any host from any host diff --git a/ipalib/plugins/hbacrule.py b/ipalib/plugins/hbacrule.py index 0f0fef002..99758b25a 100644 --- a/ipalib/plugins/hbacrule.py +++ b/ipalib/plugins/hbacrule.py @@ -118,7 +118,7 @@ class hbacrule(LDAPObject): default_attributes = [ 'cn', 'ipaenabledflag', 'description', 'usercategory', 'hostcategory', - 'sourcehostcategory', 'servicecategory', 'ipaenabledflag', + 'servicecategory', 'ipaenabledflag', 'memberuser', 'sourcehost', 'memberhost', 'memberservice', 'memberhostgroup', 'externalhost', ] -- cgit