1 files changed, 6 insertions, 6 deletions
diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py
index e97174ab..14d7b965 100644
--- a/ipalib/plugins/permission.py
+++ b/ipalib/plugins/permission.py
@@ -116,38 +116,38 @@ class permission(LDAPObject):
             label=_('Attributes'),
             doc=_('Comma-separated list of attributes'),
             normalizer=lambda value: value.lower(),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         StrEnum('type?',
             cli_name='type',
             label=_('Type'),
             doc=_('Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)'),
             values=(u'user', u'group', u'host', u'service', u'hostgroup', u'netgroup', u'dns',),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         Str('memberof?',
             cli_name='memberof',
             label=_('Member of group'),  # FIXME: Does this label make sense?
             doc=_('Target members of a group'),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         Str('filter?',
             cli_name='filter',
             label=_('Filter'),
             doc=_('Legal LDAP filter (e.g. ou=Engineering)'),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         Str('subtree?',
             cli_name='subtree',
             label=_('Subtree'),
             doc=_('Subtree to apply permissions to'),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
         Str('targetgroup?',
             cli_name='targetgroup',
             label=_('Target group'),
             doc=_('User group to apply permissions to'),
-            alwaysask=True,
+            flags=('ask_create', 'ask_update'),
         ),
     )