Hide Forgot
Description of problem: ipa help privilege-mod indicates --rights, --raw and --all to display But this cli is to modify, not display #ipa help privilege-mod Purpose: Modify a privilege. Usage: ipa [global-options] privilege-mod NAME [options] Options: -h, --help show this help message and exit --desc=STR Privilege description --addattr=STR Add an attribute/value pair. Format is attr=value. The attribute must be part of the schema. --setattr=STR Set an attribute to a name/value pair. Format is attr=value. For multi-valued attributes, the command replaces the values already present. --rights Display the access rights of this entry (requires --all). See ipa man page for details. --all Retrieve and print all attributes from the server. Affects command output. --raw Print entries as stored on the server. Only affects output format. --rename=STR Rename the privilege object Version-Release number of selected component (if applicable): ipa-server-2.1.2-2.el6.x86_64 How reproducible: always Steps to Reproduce: 1.ipa help privilege-mod Actual results: includes --rights, --all, --raw Expected results: privilege-mod should not include these options Additional info:
This is intentional, --rights, --all and --raw are currently offered for all OBJECT-mod commands (like user-mod, group-mod, sudorule-mod, etc.). These flags are used for formatting the response from the RPC server with the modified object (in your case privilege) in the same it is formatted with the mentioned display (OBJECT-show) methods.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/1971
I am proposing to close this ticket as NotABug for the reasons written above.
Sure. Please do so..I cannot.