mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
On a failed permission update if the generated ACI is invalid then the updated permission is rolled back. Add the virtual relationship attributes to list of attributes to be ignored when rolling back the entry. This relies on the current order in the LDAPObject relationships field where member and memberof are the first two values. https://pagure.io/freeipa/issue/8646 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>