RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Description of problem:
Add the existing hbac service group 'Sudo' to a hbac rule. and it gets added as 'sudo'. This lists 'Sudo' in the 'Add' window. If selected, it will throw error as expected - that this entry already exists. But this is inconsistent with other 'Add' windows which do not list objects already added.

Also: when a hostgroup, or usergroup is added, the user or host 'Add' window doesn't list members of groups already added. But Servicegroups and service doesn't behave like that. 

Version-Release number of selected component (if applicable):
ipa-server-2.2.0-16.el6.x86_64

How reproducible:
always

Steps to Reproduce:
1. Add 'Sudo' hbac service group
2. Add service
3. Click Add to add more service groups
  
Actual results:
2-> sudo services that are members of the Sudo Service group, are still listed
3 -> 'Sudo' is still listed as a group to add

Expected results:
2 -> sudo service group members should not be listed
3 -> Sudo should not be listed

Additional info:

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2823

With IdM/FreeIPA 4.1 PatternFly Web UI refactoring (Bug 1108212) and other changes, this is no longer an issue. Sudo service group is properly added and displayed.

Sudo is even no longer offered in the adding box as it is already added in the list. Closing the bug, feel free to reopen of you are still experiencing this bug.

*** Bug 830912 has been marked as a duplicate of this bug. ***