From 52a4b54635cca57ac19fb7f4dfa6031001ab925b Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Mon, 9 Jun 2014 19:29:55 +0200 Subject: [PATCH] permission plugin: Sort rights when writing the ACI This makes the ACI independent on set/dict iteration order. Reviewed-By: Martin Kosek --- ipalib/plugins/permission.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py index 5a22acdb6..814bf191b 100644 --- a/ipalib/plugins/permission.py +++ b/ipalib/plugins/permission.py @@ -550,7 +550,7 @@ class permission(baseldap.LDAPObject): raise ValueError(ipapermbindruletype) aci_parts.append('(version 3.0;acl "permission:%s";allow (%s) %s;)' % ( - name, ','.join(entry['ipapermright']), bindrule)) + name, ','.join(sorted(entry['ipapermright'])), bindrule)) return ''.join(aci_parts)