[Freeipa-devel] [freeipa PR#1520][opened] ldap2: fix implementation of can_add

[frasertweedale]

   URL: https://github.com/freeipa/freeipa/pull/1520
Author: frasertweedale
 Title: #1520: ldap2: fix implementation of can_add
Action: opened

PR body:
"""
ldap2.can_add checks for add permission of a given entry. It did not work
properly due to a defect in 389 DS.  Now that the defect has been fixed, we
also need to update can_add to work with the mechanism 389 DS provides for
checking add permission for entries where ACIs are in effect.

Update the spec file to require 389-ds-base-1.3.7.9-1 which is the first
release containing the fix.

Update the ldap2.can_add implementation to perform the add permission check
properly.  Also update call sites accordingly.

Fixes: https://pagure.io/freeipa/issue/6609
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1520/head:pr1520
git checkout pr1520