[Freeipa-devel] [freeipa PR#2858][opened] [Backport][ipa-4-6] Processing of server roles should ignore errors.EmptyResult

[rcritten]

   URL: https://github.com/freeipa/freeipa/pull/2858
Author: rcritten
 Title: #2858: [Backport][ipa-4-6] Processing of server roles should ignore
errors.EmptyResult
Action: opened

PR body:
"""
MANUAL BACKPORT.

This was not backported when the original PR was pushed. The milestone was pushed back
afterward.

ipa-4-6 still defines:
WSGI_PROCESSES=constants.WSGI_PROCESSES,

---------
When non-admin user issues a command that utilizes
api.Object.config.show_servroles_attributes(), some server roles might
return errors.EmptyResult, indicating that a role is not visible to this
identity.

Most of the callers to api.Object.config.show_servroles_attributes() do
not process errors.EmptyResult so it goes up to an API caller. In case
of Web UI it breaks retrieval of the initial configuration due to ipa
config-show failing completely rather than avoiding to show available
server roles.

Fixes: https://pagure.io/freeipa/issue/7452
Signed-off-by: Alexander Bokovoy abokovoy(a)redhat.com
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2858/head:pr2858
git checkout pr2858