IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

permission plugin: Sort rights when writing the ACI

Browse Source 
This makes the ACI independent on set/dict iteration order.

Reviewed-By: Martin Kosek <mkosek@redhat.com>
This commit is contained in:
Petr Viktorin
2014-06-09 19:29:55 +02:00
parent 36c5ba9d27
commit 52a4b54635
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ipalib/plugins/permission.py
View File

@@ -550,7 +550,7 @@ class permission(baseldap.LDAPObject):
raise ValueError(ipapermbindruletype)
aci_parts.append('(version 3.0;acl "permission:%s";allow (%s) %s;)' % (
name, ','.join(entry['ipapermright']), bindrule))
name, ','.join(sorted(entry['ipapermright'])), bindrule))
return ''.join(aci_parts)