Hide Forgot
Created attachment 1210400 [details] Screen-shot Description of problem: While setting the ACI using console. it allow the add same user multiple times. Version-Release number of selected component (if applicable): idm-console-framework-1.1.17-1.el7dsrv.noarch 389-adminutil-1.1.23-2.el7dsrv.x86_64 libsss_nss_idmap-1.14.0-43.el7.x86_64 389-admin-1.1.45-2.el7dsrv.x86_64 389-ds-base-libs-1.3.5.10-11.el7.x86_64 389-ds-base-1.3.5.10-11.el7.x86_64 389-ds-console-doc-1.2.15-1.el7dsrv.noarch redhat-idm-console-10.1.0-2.el7dsrv.x86_64 libsss_idmap-1.14.0-43.el7.x86_64 389-ds-console-1.2.15-1.el7dsrv.noarch 389-console-1.1.18-2.el7dsrv.noarch libnfsidmap-0.25-15.el7.x86_64 389-admin-console-1.1.12-2.el7dsrv.noarch 389-admin-console-doc-1.1.12-2.el7dsrv.noarch How reproducible: 100% Steps to Reproduce: 1.in User tab click on the Add.. 2.In Add User Tab click on any search result user press Add.. 3.again Add the same user from the search result tab this will allow same user in the Access permission Actual results: it allow to add same result # ldapsearch -h localhost -p 389 -D "cn=Directory Manager" -w test1234 -b "ou=People,dc=idmqe,dc=lab,dc=eng,dc=bos,dc=redhat,dc=com" -s base "(objectclass=*)" aci <snip> aci: (targetattr = "telephoneNumber") (version 3.0;acl "Test";deny (all)(userd n = "ldap:///uid=tuser1,ou=People,dc=idmqe,dc=lab,dc=eng,dc=bos,dc=redhat,dc= com" or userdn = "ldap:///uid=tuser1,ou=People,dc=idmqe,dc=lab,dc=eng,dc=bos, dc=redhat,dc=com" or userdn = "ldap:///uid=tuser1,ou=People,dc=idmqe,dc=lab,d c=eng,dc=bos,dc=redhat,dc=com");) </snip> Result after the setting ACI # ldapsearch -D "uid=tuser1,ou=People,dc=idmqe,dc=lab,dc=eng,dc=bos,dc=redhat,dc=com" -h qe-blade-01.idmqe.lab.eng.bos.redhat.com -p 389 -w test1234 -b "ou=People,dc=idmqe,dc=lab,dc=eng,dc=bos,dc=redhat,dc=com" cn telephonenumber -x -LLL dn: ou=People,dc=idmqe,dc=lab,dc=eng,dc=bos,dc=redhat,dc=com dn: uid=tuser1,ou=People,dc=idmqe,dc=lab,dc=eng,dc=bos,dc=redhat,dc=com cn: test1 user1 dn: cn=tesGroup,ou=People,dc=idmqe,dc=lab,dc=eng,dc=bos,dc=redhat,dc=com cn: tesGroup Expected results: only one time user can add
I agree it is annoying, but there is no functionality problem, isn't there? If so, I'd propose to lower the priority and push it to the next version (or close it with WONTFIX...)