Description of problem:
Add a permission, choose it to be of type - say User. Select all attributes,
but when adding, it throws error -
"attribute(s) "member,memberuid,owner" not allowed"

If these attributes cannot be chosen, then they should not be available in the
list.

Same situation for Type - Host, Service  where objectclass is not allowed.

Version-Release number of selected component (if applicable):
ipa-server-2.2.0-5.el6.x86_64

How reproducible:
always

Steps to Reproduce:
1. In IPA Server - Role Based Access Control - Permissions, click Add to add a
new permission
2. Enter permission name, permissions, select Target to be Type, select Type to
be User, either selct all attributes, or for User - select member, memberuid,
and owner


Actual results:
throws error -
"attribute(s) "member,memberuid,owner" not allowed"

Expected results:
If these attributes are not allowed, should not be on list to choose from

Additional info: