Since HBAC deny rules are now deprecated, we should no longer allow people to add them, or to modify add rules to be deny.
ticket https://fedorahosted.org/freeipa/ticket/1495 is the cli side of this. It is going to remove type altogether as a visible component, the UI should do the same. Type is still part of the schema but it will be automatically filled in with "allow".
Fix included in freeipa-admiyo-0270-9-removing-setters-setup-and-init.patch
fixed in b36df6e
Metadata Update from @admiyo: - Issue assigned to admiyo - Issue set to the milestone: FreeIPA 2.1 - 2011/07
Login to comment on this ticket.