From ef648b5b87c7a850ba4aa9a8b753341189ca7bcd Mon Sep 17 00:00:00 2001
From: Qiu Jian <qiujian@yunionyun.com>
Date: Wed, 2 Dec 2020 16:24:55 +0800
Subject: [PATCH] fix(keystone): not allow to disable sql driver

not allow to disable default SQL identity_provider driver
---
 pkg/keystone/models/identity_provider.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkg/keystone/models/identity_provider.go b/pkg/keystone/models/identity_provider.go
index 876e05210a..e7d1a251fc 100644
--- a/pkg/keystone/models/identity_provider.go
+++ b/pkg/keystone/models/identity_provider.go
@@ -1481,6 +1481,9 @@ func (idp *SIdentityProvider) PerformDisable(
 	query jsonutils.JSONObject,
 	input apis.PerformDisableInput,
 ) (jsonutils.JSONObject, error) {
+	if idp.Driver == api.IdentityDriverSQL {
+		return nil, errors.Wrap(httperrors.ErrForbidden, "not allow to disable sql idp")
+	}
 	if idp.Driver == api.IdentityDriverLDAP || idp.AutoCreateUser.IsTrue() {
 		domains, _ := idp.getLinkedDomains()
 		for i := range domains {