Commit Graph

302 Commits

Author SHA1 Message Date
Pierangelo Masarati
a54ca7a6ce factor ACI code out of slapd; now it can only use dynacl layer 2006-01-06 17:12:35 +00:00
Pierangelo Masarati
8c0ad9021a fix self<access> for "users" (ITS#4299) 2006-01-04 00:52:07 +00:00
Kurt Zeilenga
acbb5cf689 Happy new year! 2006-01-03 23:11:52 +00:00
Luke Howard
cbf33d4fb1 Handle LDAP_MOD_INCREMENT in acl_check_modlist() 2005-12-24 16:02:15 +00:00
Pierangelo Masarati
da03eb0390 normalize value in "exact" attrval clause (ITS#4255) 2005-12-09 10:33:01 +00:00
Howard Chu
b831ebba7d ITS#4218 streamline frontend/overlay access_allowed. Probably need to
do the same for acl_group and acl_attribute.
2005-11-26 07:53:07 +00:00
Pierangelo Masarati
d34fffcaf9 use lutil_ato*() whenever appropriate 2005-11-24 01:10:05 +00:00
Pierangelo Masarati
4537065ffc further isolation and cleanup of ACI code 2005-11-10 00:52:43 +00:00
Howard Chu
7dcb68f6fa Move CSN invocations to backends 2005-10-13 11:58:44 +00:00
Pierangelo Masarati
9129a2f7ee silence warnings 2005-09-10 18:59:35 +00:00
Pierangelo Masarati
8e3adc2428 fix uninitialized, signedness and other issues (ITS#3854) 2005-08-26 16:52:51 +00:00
Pierangelo Masarati
4bc8197dcb further ACI factoring out & confinement 2005-08-22 16:03:35 +00:00
Pierangelo Masarati
e066ec210e merge sml_managing into sml_flags (SLAP_MOD_MANAGING) 2005-08-18 08:48:10 +00:00
Pierangelo Masarati
ef7421b87d more on manage access level 2005-08-18 02:25:10 +00:00
Pierangelo Masarati
b2284183f9 more on manage 2005-08-17 22:06:46 +00:00
Pierangelo Masarati
ec49990d51 ACIs almost entirely factored out of slapd
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
2005-08-17 17:14:57 +00:00
Pierangelo Masarati
69c6cd5365 fix small issues with dynacl and ACI in general 2005-08-17 14:44:41 +00:00
Pierangelo Masarati
f38e72b26c trim use of uninitialized data; please review 2005-08-10 10:21:37 +00:00
Pierangelo Masarati
c3b977b2da ACL logging was incomplete (and misleading) 2005-08-07 11:36:18 +00:00
Hallvard Furuseth
5a6eabb69d Silence unused variable warnings 2005-07-27 08:52:32 +00:00
Pierangelo Masarati
d2b863fa24 fix previous commit (see NOTE and FIXMEs) 2005-07-23 10:29:40 +00:00
Luke Howard
9e4ea429e5 Add fe_access_allowed(), should allow global ACL overlays to work 2005-07-23 04:18:48 +00:00
Pierangelo Masarati
bccf2a7282 backout previous commit: frontendDB doesn't have the right rootn, ACLs and so 2005-07-22 17:22:51 +00:00
Luke Howard
6da978d5a0 Support for global ACL overlays, corresponding SLAPI support 2005-07-22 05:01:09 +00:00
Luke Howard
ffe20229dc Move most of SLAPI frontend into overlay 2005-07-21 16:35:20 +00:00
Hallvard Furuseth
2b70a083e6 Delete unused variable. 2005-07-18 06:30:47 +00:00
Hallvard Furuseth
81ecb0b153 assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL). 2005-07-18 06:22:33 +00:00
Pierangelo Masarati
deec44b89a fix further ITS#3830 issues; allow to specify a matching rule for non-DN match 2005-07-05 12:00:14 +00:00
Hallvard Furuseth
a1e27aae40 Format fix: Make style_strings[] global for debug output in dynacl_aci_parse() 2005-07-04 06:25:02 +00:00
Howard Chu
9c246fce39 ITS#3830, fix val-specific ACLs 2005-07-03 01:51:35 +00:00
Kurt Zeilenga
b703938d61 symbol rename for AIX (ITS#3787) 2005-06-16 19:17:38 +00:00
Howard Chu
8f58409749 Add SLAP_MOD_INTERNAL flag to Modifications, allow internal ops to bypass
ACL checks when modifying user-modifiable attributes as non-root user.
2005-06-04 09:44:39 +00:00
Howard Chu
f19a4ea9ec More value ACL style tweaks 2005-05-10 00:51:28 +00:00
Pierangelo Masarati
a6f8cd07f6 partially revert previous commit (ITS#3652) 2005-04-13 01:03:46 +00:00
Pierangelo Masarati
a85603c10b more on ITS#3652 2005-04-12 22:38:54 +00:00
Pierangelo Masarati
2430af4e8b fix slapacl when doing cross-database access checking 2005-04-12 22:13:42 +00:00
Pierangelo Masarati
387864a9f2 cleanup previous commit 2005-04-12 19:35:53 +00:00
Pierangelo Masarati
d2dd3a616c hide changes behind specific #ifdef, conditioned by LDAP_DEBUG; always allow access on back-dnssrv 2005-04-12 01:07:30 +00:00
Pierangelo Masarati
f103c78530 cleanup previous commit 2005-04-12 00:34:13 +00:00
Pierangelo Masarati
15016154b6 add ACL hook to overlays 2005-04-12 00:24:04 +00:00
Pierangelo Masarati
91b4e991be cleanup & silence warnings 2005-04-11 21:35:34 +00:00
Pierangelo Masarati
4abbf9c610 implement add/delete granularity in write access (ITS#3631) 2005-04-08 00:18:24 +00:00
Pierangelo Masarati
e0fd9ebf14 cleanup previous commits 2005-04-04 11:19:21 +00:00
Pierangelo Masarati
3eb87b2faa implement "realdn" by clause in ACLs (ITS#3627; accounting for Howard's remarks) 2005-04-03 01:59:03 +00:00
Pierangelo Masarati
584b21d20b initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615) 2005-03-31 18:10:11 +00:00
Pierangelo Masarati
a96f2af281 more dnParent() and misc cleanup 2005-03-30 22:45:46 +00:00
Pierangelo Masarati
22bc85dc77 minor cleanup 2005-03-30 18:58:52 +00:00
Howard Chu
0076b40c32 Convert backendInfo/backendDB to STAILQs 2005-03-24 05:13:31 +00:00
Howard Chu
1e5f43ddd1 In aci_set_gather propagate op->o_private to subordinate search 2005-03-17 22:28:30 +00:00
Howard Chu
e0ca6e386e Added acl_unparse, slap_sasl_getpolicy 2005-02-22 12:02:34 +00:00