Add flags to enforce asking for object attribute

So far the only flag to enforce asking in interactive mode was the
alwaysask attribute, which is not sufficient any more. This patch adds
the ability to control for which actions the atrribute shall be asked
for.

1 files changed, 6 insertions, 6 deletions

diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py
index e97174ab..14d7b965 100644
--- a/ipalib/plugins/permission.py
+++ b/ipalib/plugins/permission.py
@@ -116,38 +116,38 @@ class permission(LDAPObject):
             label=_('Attributes'),
             doc=_('Comma-separated list of attributes'),
             normalizer=lambda value: value.lower(),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         StrEnum('type?',
             cli_name='type',
             label=_('Type'),
             doc=_('Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)'),
             values=(u'user', u'group', u'host', u'service', u'hostgroup', u'netgroup', u'dns',),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         Str('memberof?',
             cli_name='memberof',
             label=_('Member of group'),  # FIXME: Does this label make sense?
             doc=_('Target members of a group'),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         Str('filter?',
             cli_name='filter',
             label=_('Filter'),
             doc=_('Legal LDAP filter (e.g. ou=Engineering)'),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         Str('subtree?',
             cli_name='subtree',
             label=_('Subtree'),
             doc=_('Subtree to apply permissions to'),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         Str('targetgroup?',
             cli_name='targetgroup',
             label=_('Target group'),
             doc=_('User group to apply permissions to'),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
     )