diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2014-02-06 12:33:43 +0100 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2014-02-06 16:46:33 +0100 |
| commit | 206f16a4e8776bce6cef3fcfaf0458e6c2ccdd7a (patch) | |
| tree | 5fc230c049001fbf5b4e9ee52c111426181427f7 | |
| parent | da70c6d9353cd29531c8e2c135db81a97f22293c (diff) | |
| download | freeipa-206f16a4e8776bce6cef3fcfaf0458e6c2ccdd7a.tar.gz freeipa-206f16a4e8776bce6cef3fcfaf0458e6c2ccdd7a.tar.xz freeipa-206f16a4e8776bce6cef3fcfaf0458e6c2ccdd7a.zip | |
Remove sourcehostcategory from the default HBAC rule.
https://fedorahosted.org/freeipa/ticket/4158
Reviewed-By: Martin Kosek <mkosek@redhat.com>
| -rw-r--r-- | install/share/default-hbac.ldif | 1 | ||||
| -rw-r--r-- | ipalib/plugins/hbacrule.py | 2 |
2 files changed, 1 insertions, 2 deletions
diff --git a/install/share/default-hbac.ldif b/install/share/default-hbac.ldif index b7b6ba284..52fd30ec9 100644 --- a/install/share/default-hbac.ldif +++ b/install/share/default-hbac.ldif @@ -7,7 +7,6 @@ cn: allow_all accessruletype: allow usercategory: all hostcategory: all -sourcehostcategory: all servicecategory: all ipaenabledflag: TRUE description: Allow all users to access any host from any host diff --git a/ipalib/plugins/hbacrule.py b/ipalib/plugins/hbacrule.py index 5cc8bc1a3..daf165346 100644 --- a/ipalib/plugins/hbacrule.py +++ b/ipalib/plugins/hbacrule.py @@ -118,7 +118,7 @@ class hbacrule(LDAPObject): default_attributes = [ 'cn', 'ipaenabledflag', 'description', 'usercategory', 'hostcategory', - 'sourcehostcategory', 'servicecategory', 'ipaenabledflag', + 'servicecategory', 'ipaenabledflag', 'memberuser', 'sourcehost', 'memberhost', 'memberservice', 'memberhostgroup', 'externalhost', ] |