From bea7818adde2712be3ee052634bdf314fd63b5da Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 6 Jul 2011 17:45:53 -0400 Subject: Remove the ability to create new HBAC deny rules. New rules will all be allow type. Existing rules cannot be changed to deny. The type attribute now defaults to allow with autofill so it won't be prompted in interactive mode in the cli. https://fedorahosted.org/freeipa/ticket/1432 --- tests/test_xmlrpc/test_hbac_plugin.py | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) (limited to 'tests') diff --git a/tests/test_xmlrpc/test_hbac_plugin.py b/tests/test_xmlrpc/test_hbac_plugin.py index b2345cc4a..29e9f6c48 100644 --- a/tests/test_xmlrpc/test_hbac_plugin.py +++ b/tests/test_xmlrpc/test_hbac_plugin.py @@ -436,6 +436,31 @@ class test_hbac(XMLRPC_test): finally: api.Command['hbacrule_remove_service'](self.rule_name, hbacsvc=self.test_service) + def test_l_hbacrule_add(self): + """ + Test adding a new HBAC rule with a deny type. + """ + try: + api.Command['hbacrule_add']( + u'denyrule', + accessruletype=u'deny', + description=self.rule_desc, + ) + except errors.ValidationError: + pass + + def test_m_hbacrule_add(self): + """ + Test changing an HBAC rule to the deny type + """ + try: + api.Command['hbacrule_mod']( + self.rule_name, + accessruletype=u'deny', + ) + except errors.ValidationError: + pass + def test_z_hbacrule_del(self): """ Test deleting a HBAC rule using `xmlrpc.hbacrule_del`. -- cgit