diff options
author | Rob Crittenden <rcritten@redhat.com> | 2011-01-20 16:35:34 -0500 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2011-01-21 10:47:43 -0500 |
commit | fc28fae03fd1510d571a5011ef9d712c7778e578 (patch) | |
tree | fcdb81011c3e9a55cd637c1d7e46a499fd431e85 /ipalib/errors.py | |
parent | c22a3d25daee443db2e408c5325242691a62062e (diff) | |
download | freeipa-fc28fae03fd1510d571a5011ef9d712c7778e578.tar.gz freeipa-fc28fae03fd1510d571a5011ef9d712c7778e578.tar.xz freeipa-fc28fae03fd1510d571a5011ef9d712c7778e578.zip |
Add some basic filter validation to permissions and disallow empty filters
Try a query with a filter to see if it is at least legal. This doesn't
guarantee that the filter is at all otherwise sane.
ticket 808
Diffstat (limited to 'ipalib/errors.py')
-rw-r--r-- | ipalib/errors.py | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/ipalib/errors.py b/ipalib/errors.py index 225019041..faa9e8119 100644 --- a/ipalib/errors.py +++ b/ipalib/errors.py @@ -1347,6 +1347,22 @@ class InvalidSyntax(ExecutionError): format = _('%(attr)s: Invalid syntax.') +class BadSearchFilter(ExecutionError): + """ + **4209** Raised when an invalid LDAP search filter is used + + For example: + + >>> raise BadSearchFilter(info='') + Traceback (most recent call last): + ... + BadSearchFilter: Bad search filter + """ + + errno = 4209 + format = _('Bad search filter %(info)s') + + class CertificateError(ExecutionError): """ **4300** Base class for Certificate execution errors (*4300 - 4399*). |