[Freeipa-devel] [freeipa PR#5411][opened] Remove virtual attributes before rolling back a permission

[rcritten]

URL: https://github.com/freeipa/freeipa/pull/5411
Author: rcritten
 Title: #5411: Remove virtual attributes before rolling back a permission
Action: opened

PR body:
"""
On a failed permission update if the generated ACI is
invalid then the updated permission is rolled back.

Add the virtual relationship attributes to list of attributes
to be ignored when rolling back the entry.

This relies on the current order in the LDAPObject
relationships field where member and memberof are the first
two values.

https://pagure.io/freeipa/issue/8646

Signed-off-by: Rob Crittenden

"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5411/head:pr5411
git checkout pr5411