Commit Graph

270 Commits

Author SHA1 Message Date
Howard Chu
f19a4ea9ec More value ACL style tweaks 2005-05-10 00:51:28 +00:00
Pierangelo Masarati
a6f8cd07f6 partially revert previous commit (ITS#3652) 2005-04-13 01:03:46 +00:00
Pierangelo Masarati
a85603c10b more on ITS#3652 2005-04-12 22:38:54 +00:00
Pierangelo Masarati
2430af4e8b fix slapacl when doing cross-database access checking 2005-04-12 22:13:42 +00:00
Pierangelo Masarati
387864a9f2 cleanup previous commit 2005-04-12 19:35:53 +00:00
Pierangelo Masarati
d2dd3a616c hide changes behind specific #ifdef, conditioned by LDAP_DEBUG; always allow access on back-dnssrv 2005-04-12 01:07:30 +00:00
Pierangelo Masarati
f103c78530 cleanup previous commit 2005-04-12 00:34:13 +00:00
Pierangelo Masarati
15016154b6 add ACL hook to overlays 2005-04-12 00:24:04 +00:00
Pierangelo Masarati
91b4e991be cleanup & silence warnings 2005-04-11 21:35:34 +00:00
Pierangelo Masarati
4abbf9c610 implement add/delete granularity in write access (ITS#3631) 2005-04-08 00:18:24 +00:00
Pierangelo Masarati
e0fd9ebf14 cleanup previous commits 2005-04-04 11:19:21 +00:00
Pierangelo Masarati
3eb87b2faa implement "realdn" by clause in ACLs (ITS#3627; accounting for Howard's remarks) 2005-04-03 01:59:03 +00:00
Pierangelo Masarati
584b21d20b initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615) 2005-03-31 18:10:11 +00:00
Pierangelo Masarati
a96f2af281 more dnParent() and misc cleanup 2005-03-30 22:45:46 +00:00
Pierangelo Masarati
22bc85dc77 minor cleanup 2005-03-30 18:58:52 +00:00
Howard Chu
0076b40c32 Convert backendInfo/backendDB to STAILQs 2005-03-24 05:13:31 +00:00
Howard Chu
1e5f43ddd1 In aci_set_gather propagate op->o_private to subordinate search 2005-03-17 22:28:30 +00:00
Howard Chu
e0ca6e386e Added acl_unparse, slap_sasl_getpolicy 2005-02-22 12:02:34 +00:00
Pierangelo Masarati
b381e1bcc8 cosmetic changes 2005-01-12 14:25:08 +00:00
Kurt Zeilenga
1c5d78d8dd Add "disclose" and "manage" ACL levels (but no meat).
Disclose permission intended to be used for "disclose on error"
(as in our present "none"), none being "don't disclose on error".

Manage permission is intended to be used to allow DSA IT management
(e.g., changing entryCSNs, structuralObjectClass, etc.).
2005-01-08 05:26:18 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Pierangelo Masarati
e891dbcdc4 fix dynacl compile 2004-11-26 00:34:48 +00:00
Howard Chu
90cc409325 Split Operation into Opheader and op 2004-11-25 22:59:00 +00:00
Howard Chu
3a5bde98ba Disable back-bdb native syncrepl support, enable syncprov overlay,
remove syncrepl stuff from Operation struct
2004-11-25 21:16:54 +00:00
Pierangelo Masarati
dceaa05c0e should fix compile when SLAPD_ACI_ENABLED is undefined 2004-11-23 21:20:13 +00:00
Pierangelo Masarati
f93d4a31e8 allow a "users" type in ACI 2004-11-20 14:07:07 +00:00
Pierangelo Masarati
cc0353610f more cleanup and ITS number 2004-11-20 12:12:57 +00:00
Pierangelo Masarati
c75386a279 cleanup fix to ITS#3303 2004-11-20 12:07:39 +00:00
Pierangelo Masarati
40762c524a fix ITS#3303 2004-11-20 11:55:46 +00:00
Pierangelo Masarati
1e650374c2 add more semantics to the "type" field; fix a bug in anonymous operations; treat children aci_mask() as internal searches 2004-11-20 11:45:05 +00:00
Pierangelo Masarati
e79fbb88cf move ACIs under a dynamic infrastructure that allows run-time loadable custom access control logic (needs work) 2004-11-20 01:27:03 +00:00
Pierangelo Masarati
947268c5ee partially revert previous commit (the "creator" special DN pattern is redundant as "dnattr" is more expressive 2004-11-15 22:57:03 +00:00
Pierangelo Masarati
064eb88ef8 move special dn patterns to style enum; add creator special dn pattern 2004-11-15 22:15:28 +00:00
Pierangelo Masarati
9eabe1365b improve memory allocation in sets 2004-10-08 15:07:22 +00:00
Pierangelo Masarati
2f6f6f6a07 "optimize" sets: since the attr part must be an attribute, use the AttributeDescription 2004-10-08 00:28:16 +00:00
Pierangelo Masarati
58edfcca31 improve previous commit 2004-10-07 23:38:17 +00:00
Pierangelo Masarati
aa2e9413f1 fix previous commit 2004-10-07 22:31:36 +00:00
Pierangelo Masarati
e5ade14256 improve previous commit; now attrs in URI, if any, are added to that in the [<dn>]/<attr> form 2004-10-07 20:44:01 +00:00
Pierangelo Masarati
6a9bf9765e add URI search to sets; documentation to come... 2004-10-07 17:05:48 +00:00
Pierangelo Masarati
2b74930cb0 s/free/slap_sl_free/ 2004-10-06 23:53:30 +00:00
Pierangelo Masarati
4204aee7b9 extend the availability of submatches to non-regex DN patterns 2004-10-06 22:03:33 +00:00
Pierangelo Masarati
6ef9689b3f fix string_expand error cases; cleanup 2004-10-04 20:52:58 +00:00
Kurt Zeilenga
d611a4b49a unifdef -UNEW_LOGGING 2004-09-04 04:54:28 +00:00
Howard Chu
91033d6552 Reworked fix for ITS#3140 - add access parameter to backend_attribute 2004-08-18 17:14:22 +00:00
Pierangelo Masarati
bfb6465533 cleanup 2004-08-06 16:40:15 +00:00
Pierangelo Masarati
cd9a9c628d frontend stuff moved into a database structure, essentially to allow overlays to be processed before database selection; passes all tests (ITS#3080) 2004-07-26 21:26:34 +00:00
Pierangelo Masarati
74f224583b quick fix for ITS#3215; needs work to re-enable ACI caching, if possible at all 2004-07-02 16:45:06 +00:00
Pierangelo Masarati
6465801cfc beautify comment 2004-06-30 16:26:06 +00:00
Pierangelo Masarati
f109f1eb6d fix ITS#3140 2004-05-12 23:29:42 +00:00
Pierangelo Masarati
d40e5a365a fix DN_SEPARATOR() and clarify its use 2004-05-07 09:03:05 +00:00