mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-01-06 10:46:21 +08:00
Code Issues Packages Projects Releases Wiki Activity

allow backend_attribute to check access to "entry" and "children" pseudo-attributes

Browse Source
This commit is contained in:
Pierangelo Masarati 2006-01-06 16:24:07 +00:00
parent 2c21dbd56f
commit f9a104bf4d
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
servers/slapd/backend.c
View File

@ -1457,6 +1457,19 @@ fe_acl_attribute(
} }
if ( e ) { if ( e ) {
if ( entry_at == slap_schema.si_ad_entry || entry_at == slap_schema.si_ad_children ) {
assert( vals == NULL );
rc = LDAP_SUCCESS;
if ( op->o_conn && access > ACL_NONE &&
access_allowed( op, e, entry_at, NULL,
access, &acl_state ) == 0 )
{
rc = LDAP_INSUFFICIENT_ACCESS;
}
goto freeit;
}
a = attr_find( e->e_attrs, entry_at ); a = attr_find( e->e_attrs, entry_at );
if ( a == NULL ) { if ( a == NULL ) {
SlapReply rs = { 0 }; SlapReply rs = { 0 };