Commit Graph

245 Commits

Author SHA1 Message Date
Pierangelo Masarati
f93d4a31e8 allow a "users" type in ACI 2004-11-20 14:07:07 +00:00
Pierangelo Masarati
cc0353610f more cleanup and ITS number 2004-11-20 12:12:57 +00:00
Pierangelo Masarati
c75386a279 cleanup fix to ITS#3303 2004-11-20 12:07:39 +00:00
Pierangelo Masarati
40762c524a fix ITS#3303 2004-11-20 11:55:46 +00:00
Pierangelo Masarati
1e650374c2 add more semantics to the "type" field; fix a bug in anonymous operations; treat children aci_mask() as internal searches 2004-11-20 11:45:05 +00:00
Pierangelo Masarati
e79fbb88cf move ACIs under a dynamic infrastructure that allows run-time loadable custom access control logic (needs work) 2004-11-20 01:27:03 +00:00
Pierangelo Masarati
947268c5ee partially revert previous commit (the "creator" special DN pattern is redundant as "dnattr" is more expressive 2004-11-15 22:57:03 +00:00
Pierangelo Masarati
064eb88ef8 move special dn patterns to style enum; add creator special dn pattern 2004-11-15 22:15:28 +00:00
Pierangelo Masarati
9eabe1365b improve memory allocation in sets 2004-10-08 15:07:22 +00:00
Pierangelo Masarati
2f6f6f6a07 "optimize" sets: since the attr part must be an attribute, use the AttributeDescription 2004-10-08 00:28:16 +00:00
Pierangelo Masarati
58edfcca31 improve previous commit 2004-10-07 23:38:17 +00:00
Pierangelo Masarati
aa2e9413f1 fix previous commit 2004-10-07 22:31:36 +00:00
Pierangelo Masarati
e5ade14256 improve previous commit; now attrs in URI, if any, are added to that in the [<dn>]/<attr> form 2004-10-07 20:44:01 +00:00
Pierangelo Masarati
6a9bf9765e add URI search to sets; documentation to come... 2004-10-07 17:05:48 +00:00
Pierangelo Masarati
2b74930cb0 s/free/slap_sl_free/ 2004-10-06 23:53:30 +00:00
Pierangelo Masarati
4204aee7b9 extend the availability of submatches to non-regex DN patterns 2004-10-06 22:03:33 +00:00
Pierangelo Masarati
6ef9689b3f fix string_expand error cases; cleanup 2004-10-04 20:52:58 +00:00
Kurt Zeilenga
d611a4b49a unifdef -UNEW_LOGGING 2004-09-04 04:54:28 +00:00
Howard Chu
91033d6552 Reworked fix for ITS#3140 - add access parameter to backend_attribute 2004-08-18 17:14:22 +00:00
Pierangelo Masarati
bfb6465533 cleanup 2004-08-06 16:40:15 +00:00
Pierangelo Masarati
cd9a9c628d frontend stuff moved into a database structure, essentially to allow overlays to be processed before database selection; passes all tests (ITS#3080) 2004-07-26 21:26:34 +00:00
Pierangelo Masarati
74f224583b quick fix for ITS#3215; needs work to re-enable ACI caching, if possible at all 2004-07-02 16:45:06 +00:00
Pierangelo Masarati
6465801cfc beautify comment 2004-06-30 16:26:06 +00:00
Pierangelo Masarati
f109f1eb6d fix ITS#3140 2004-05-12 23:29:42 +00:00
Pierangelo Masarati
d40e5a365a fix DN_SEPARATOR() and clarify its use 2004-05-07 09:03:05 +00:00
Pierangelo Masarati
b34cf02488 more on fixing escaped semicolon in normalized DN 2004-05-07 02:18:08 +00:00
Pierangelo Masarati
b69a2acdf5 use fist backend only if there is no global ACL (ITS#3100) 2004-04-20 19:26:02 +00:00
Pierangelo Masarati
1c952c8a7e revert prevuos NULL o_bd commit 2004-04-20 15:18:06 +00:00
Pierangelo Masarati
30f697beeb improve dn.one="" fix 2004-04-20 14:50:16 +00:00
Pierangelo Masarati
537a4cae02 global ACLs were not used because op->o_bd is set to &backends[0] if NULL 2004-04-20 14:42:48 +00:00
Pierangelo Masarati
3c5f305a7f fix acl bug when using dn.one="" 2004-04-20 14:15:39 +00:00
Kurt Zeilenga
1372965d89 ITS#3092: Rename sl_free() and friends to slap_sl_free() 2004-04-20 03:44:57 +00:00
Pierangelo Masarati
7b65d46b1b add slapacl tool 2004-04-20 00:08:44 +00:00
Kurt Zeilenga
c7f0438044 bvalue cleanup 2004-04-08 06:49:17 +00:00
Kurt Zeilenga
44725e7303 use BER_BVNULL 2004-04-07 04:11:43 +00:00
Kurt Zeilenga
c7e89d57be swap be_isroot and be_isroot_dn symbols 2004-04-06 01:06:20 +00:00
Pierangelo Masarati
e516247068 exploit new isroot_dn helper 2004-04-05 17:31:27 +00:00
Howard Chu
35c774d3b8 Yet more for ITS#3008. Seems to work properly now. 2004-03-10 09:11:20 +00:00
Howard Chu
3853fade60 More for ITS#3008 2004-03-10 08:00:41 +00:00
Howard Chu
cac30b1855 ITS#3008 fix value-based ACLs 2004-03-10 02:59:03 +00:00
Pierangelo Masarati
006745430e allow "expand" style in peername, sockname, sockurl as well; more sanity checks 2004-03-09 19:44:14 +00:00
Pierangelo Masarati
042869366d use "expand" instead of "regex" for group ACLs that allow substring expansion, preserving backwards compatibility; add sanity checks 2004-03-09 16:33:05 +00:00
Pierangelo Masarati
a4e062ca36 apply advanced peername ACL (ITS#2907) 2004-03-08 18:49:12 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Luke Howard
c03a70955d Make defaulted backend available to ACL plugin pblock 2004-01-01 09:42:44 +00:00
Luke Howard
03e5db818f Fix ACL plugin bug - return value of ACL plugins was being ignored 2004-01-01 06:33:18 +00:00
Luke Howard
f289d6b7f0 Fix assertion failure if acl_check_modlist() called where op->o_bd == NULL.
Behavior now matches access_allowed() - the first backend is used. The
code needs review, I have not tested it.
2003-12-30 03:50:14 +00:00
Luke Howard
0549d46adf Don't require slapi to be in the path - always include slapi/slapi.h 2003-12-28 04:17:48 +00:00
Pierangelo Masarati
f2a9089e4d cleanup most of the -pedantic warnings (ITS#2884) and other small fixes 2003-12-17 20:55:46 +00:00
Luke Howard
516fd0ff50 First round of SLAPI cleanups - use slapi_int_XXX for internal functions
(slapi_x_XXX is still reserved for exported functions that are not part
of the SLAPI specification)
2003-12-16 15:49:31 +00:00