IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Prevent deletion of the last admin

Browse Source 
Raise an error when trying to delete the last user in the
'admins' group, or remove the last member from the group,
or delete the group itself.

https://fedorahosted.org/freeipa/ticket/2564
This commit is contained in:
Petr Viktorin
2012-05-23 05:44:53 -04:00
committed by Rob Crittenden
parent cf72738b21
commit f8e7b516d9
5 changed files with 150 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
ipalib/errors.py
View File

@@ -1575,6 +1575,38 @@ class DependentEntry(ExecutionError):
format = _('%(key)s cannot be deleted because %(label)s %(dependent)s requires it')
class LastMemberError(ExecutionError):
"""
**4308** Raised when an entry being deleted is last member of a protected group
For example:
>>> raise LastMemberError(key=u'admin', label=u'group', container=u'admins')
Traceback (most recent call last):
...
LastMemberError: admin cannot be deleted because it is the last member of group admins
"""
errno = 4308
format = _('%(key)s cannot be deleted because it is the last member of %(label)s %(container)s')
class ProtectedEntryError(ExecutionError):
"""
**4309** Raised when an entry being deleted is protected
For example:
>>> raise ProtectedEntryError(label=u'group', key=u'admins', reason=u'privileged group')
Traceback (most recent call last):
...
ProtectedEntryError: group admins cannot be deleted: privileged group
"""
errno = 4309
format = _('%(label)s %(key)s cannot be deleted: %(reason)s')
##############################################################################
# 5000 - 5999: Generic errors