From edf0719409c9f556ea461139cf031881fbfe5cbf Mon Sep 17 00:00:00 2001
From: Petr Vobornik <pvoborni@redhat.com>
Date: Sep 26 2013 08:24:14 +0000
Subject: Allow edit of ipakrbokasdelegate in Web UI when attrlevelrights are unknown


Old host entries are missing object class with krbticketflags attribute. Therefore UI does not receive attrlevelrights for it. This OC is added when ipakrbokasdelegate is set.

This patch adds the usual hack for such cases.

https://fedorahosted.org/freeipa/ticket/3940

---

diff --git a/install/ui/src/freeipa/host.js b/install/ui/src/freeipa/host.js
index f4b1e24..f500753 100644
--- a/install/ui/src/freeipa/host.js
+++ b/install/ui/src/freeipa/host.js
@@ -99,7 +99,8 @@ return {
                         {
                             name: 'ipakrbokasdelegate',
                             $type: 'checkbox',
-                            acl_param: 'krbticketflags'
+                            acl_param: 'krbticketflags',
+                            flags: ['w_if_no_aci']
                         }
                     ]
                 },
diff --git a/ipatests/test_webui/test_host.py b/ipatests/test_webui/test_host.py
index cb697c5..0920006 100644
--- a/ipatests/test_webui/test_host.py
+++ b/ipatests/test_webui/test_host.py
@@ -203,13 +203,13 @@ class test_host(host_tasks):
         Test Kerberos flags
         http://www.freeipa.org/page/V3/Kerberos_Flags
         """
-        pkey = self.config.get('ipa_server')
         name = 'ipakrbokasdelegate'
         mod = {'mod': [('checkbox', name, '')]}
         checked = ['checked']
 
         self.init_app()
-        self.navigate_to_record(pkey, entity=ENTITY)
+        self.add_record(ENTITY, self.data)
+        self.navigate_to_record(self.pkey)
 
         if self.get_field_checked(name) == checked:
             self.mod_record(ENTITY, mod)  # uncheck
@@ -218,6 +218,7 @@ class test_host(host_tasks):
         self.validate_fields([('checkbox', name, checked)])
         self.mod_record(ENTITY, mod)
         self.validate_fields([('checkbox', name, [])])
+        self.delete_record(self.pkey, self.data.get('del'))
 
     def test_associations(self):
         """