freeipa

#9188 Add warning for empty targetattr when creating ACI with RBAC
Closed: fixed by frenaud. Opened by rcritten.

Closed: fixed
Reopen Issue

Issue

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=2098187

When we create RBAC permission, with CLI or WebUI, we can create permission with empty target attribute list.

This will act as we didn't permit any attributes to be accessed, so permission without attributes won't do anything.

Version-Release number of selected component (if applicable):
RHEL 8.6
ipa-server-4.9.8-7
389-ds-base-1.4.3.28-6

How reproducible:
always

Expected results:
we should probably add a warning that empty target attributes are not really meaningful. Or just make this mandatory.

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2098187

PR https://github.com/freeipa/freeipa/pull/6343

master:

  • dc73813b8afccb82b513c49b29de35b7864819b6 Warn for permissions with read/write/search/compare and no attrs

ipa-4-10:

  • 499f71729b8689d40608d9c99db703eb2c00a934 Warn for permissions with read/write/search/compare and no attrs

ipa-4-9:

  • b31631ad69f72fb42b5091375df8021580f8139a Warn for permissions with read/write/search/compare and no attrs

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
High
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.