From a356385f2d73d17ec883d2618d6037efee08f548 Mon Sep 17 00:00:00 2001
From: Petr Vobornik <pvoborni@redhat.com>
Date: Fri, 25 Jul 2014 12:39:48 +0200
Subject: [PATCH] baseldap: return 'none' attr level right as unicode string

Returning non-unicode causes serialization into base64 which causes havoc
in Web UI.

https://fedorahosted.org/freeipa/ticket/4454

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
---
 ipalib/plugins/baseldap.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ipalib/plugins/baseldap.py b/ipalib/plugins/baseldap.py
index e5a23b99f..83571ba51 100644
--- a/ipalib/plugins/baseldap.py
+++ b/ipalib/plugins/baseldap.py
@@ -213,7 +213,7 @@ def get_effective_rights(ldap, dn, attrs=None):
             if v == 'none':
                 # the string "none" means "no rights found"
                 # see https://fedorahosted.org/freeipa/ticket/4359
-                v = ''
+                v = u''
             rdict[k.strip().lower()] = v
 
     return rdict