diff options
| author | Russ Allbery <rra@stanford.edu> | 2010-03-03 21:06:41 -0800 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2010-03-03 21:06:41 -0800 |
| commit | 6c1f7d325239f305b9bf6a4503165cefae1ee3d8 (patch) | |
| tree | 6f57cd2189ddb34abeeee01ad96f6a69327cc6c2 /NEWS | |
| parent | 69289862465a3bfb3488c1b3a674b6b06c9911ee (diff) | |
Verify that an ACL to be deleted is not referenced
When deleting an ACL on the server, verify that the ACL is not
referenced by any object first. Database referential integrity should
also catch this, but not all database backends may enforce referential
integrity. This also allows us to return a better error message
naming an object that's still using that ACL.
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -2,6 +2,12 @@ wallet 0.11 (unreleased) + When deleting an ACL on the server, verify that the ACL is not + referenced by any object first. Database referential integrity should + also catch this, but not all database backends may enforce referential + integrity. This also allows us to return a better error message + naming an object that's still using that ACL. + Fix portability to older Kerberos libraries without krb5_free_error_message. |