mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-01-06 10:46:21 +08:00
allow backend_attribute to check access to "entry" and "children" pseudo-attributes
This commit is contained in:
parent
2c21dbd56f
commit
f9a104bf4d
@ -1457,6 +1457,19 @@ fe_acl_attribute(
|
||||
}
|
||||
|
||||
if ( e ) {
|
||||
if ( entry_at == slap_schema.si_ad_entry || entry_at == slap_schema.si_ad_children ) {
|
||||
assert( vals == NULL );
|
||||
|
||||
rc = LDAP_SUCCESS;
|
||||
if ( op->o_conn && access > ACL_NONE &&
|
||||
access_allowed( op, e, entry_at, NULL,
|
||||
access, &acl_state ) == 0 )
|
||||
{
|
||||
rc = LDAP_INSUFFICIENT_ACCESS;
|
||||
}
|
||||
goto freeit;
|
||||
}
|
||||
|
||||
a = attr_find( e->e_attrs, entry_at );
|
||||
if ( a == NULL ) {
|
||||
SlapReply rs = { 0 };
|
||||
|
Loading…
Reference in New Issue
Block a user