The following command results in an internal error:
./ipa permission-add some-perm --permissions='"read,write"' --attrs=cn
The permission validator in our ACI plugin does comma splitting (in addition to CSV splitting done by the frontend), so it lets a string with comma-separated permissions through. permission-add will choke on such a string later on.
permission-add
When we drop CSV support this will be more visible, since the various quotes in that command won't be necessary.
master:[[BR]] da42daa Fix permission validation and normalization in aci.py
ipa-3-1:[[BR]] 621c247 Fix permission validation and normalization in aci.py
Metadata Update from @pviktori: - Issue assigned to pviktori - Issue set to the milestone: FreeIPA 3.2 - 2013/02
Login to comment on this ticket.