From 97565cf8ffa8741dac3629e8989d747faa24ddf0 Mon Sep 17 00:00:00 2001
From: David Kupka <dkupka@redhat.com>
Date: Jul 29 2014 11:10:51 +0000
Subject: Fix group-remove-member crash when group is removed from a protected group


https://fedorahosted.org/freeipa/ticket/4448

Reviewed-By: Martin Kosek <mkosek@redhat.com>

---

diff --git a/ipalib/plugins/group.py b/ipalib/plugins/group.py
index af5d4b6..69740df 100644
--- a/ipalib/plugins/group.py
+++ b/ipalib/plugins/group.py
@@ -522,7 +522,7 @@ class group_remove_member(LDAPRemoveMember):
 
     def pre_callback(self, ldap, dn, found, not_found, *keys, **options):
         assert isinstance(dn, DN)
-        if keys[0] in PROTECTED_GROUPS:
+        if keys[0] in PROTECTED_GROUPS and 'user' in options:
             protected_group_name = keys[0]
             result = api.Command.group_show(protected_group_name)
             users_left = set(result['result'].get('member_user', []))