From 83cb98285810970909162cd1de1615bec7f8e685 Mon Sep 17 00:00:00 2001
From: Petr Viktorin <pviktori@redhat.com>
Date: Jun 18 2014 12:56:42 +0000
Subject: Add $REALM to variables supported by the managed permission updater


This will allow converting password policy permissions

Part of the work for: https://fedorahosted.org/freeipa/ticket/4346

Reviewed-By: Martin Kosek <mkosek@redhat.com>

---

diff --git a/ipaserver/install/plugins/update_managed_permissions.py b/ipaserver/install/plugins/update_managed_permissions.py
index 2ca054d..7394e62 100644
--- a/ipaserver/install/plugins/update_managed_permissions.py
+++ b/ipaserver/install/plugins/update_managed_permissions.py
@@ -345,6 +345,7 @@ class update_managed_permissions(PostUpdate):
         if 'replaces' in template:
             sub_dict = {
                 'SUFFIX': str(self.api.env.basedn),
+                'REALM': str(self.api.env.realm),
             }
             legacy_acistrs = [ipautil.template_str(r, sub_dict)
                               for r in template['replaces']]