Pierangelo Masarati
a54ca7a6ce
factor ACI code out of slapd; now it can only use dynacl layer
2006-01-06 17:12:35 +00:00
Pierangelo Masarati
8c0ad9021a
fix self<access> for "users" (ITS#4299)
2006-01-04 00:52:07 +00:00
Kurt Zeilenga
acbb5cf689
Happy new year!
2006-01-03 23:11:52 +00:00
Luke Howard
cbf33d4fb1
Handle LDAP_MOD_INCREMENT in acl_check_modlist()
2005-12-24 16:02:15 +00:00
Pierangelo Masarati
da03eb0390
normalize value in "exact" attrval clause (ITS#4255)
2005-12-09 10:33:01 +00:00
Howard Chu
b831ebba7d
ITS#4218 streamline frontend/overlay access_allowed. Probably need to
...
do the same for acl_group and acl_attribute.
2005-11-26 07:53:07 +00:00
Pierangelo Masarati
d34fffcaf9
use lutil_ato*() whenever appropriate
2005-11-24 01:10:05 +00:00
Pierangelo Masarati
4537065ffc
further isolation and cleanup of ACI code
2005-11-10 00:52:43 +00:00
Howard Chu
7dcb68f6fa
Move CSN invocations to backends
2005-10-13 11:58:44 +00:00
Pierangelo Masarati
9129a2f7ee
silence warnings
2005-09-10 18:59:35 +00:00
Pierangelo Masarati
8e3adc2428
fix uninitialized, signedness and other issues (ITS#3854)
2005-08-26 16:52:51 +00:00
Pierangelo Masarati
4bc8197dcb
further ACI factoring out & confinement
2005-08-22 16:03:35 +00:00
Pierangelo Masarati
e066ec210e
merge sml_managing into sml_flags (SLAP_MOD_MANAGING)
2005-08-18 08:48:10 +00:00
Pierangelo Masarati
ef7421b87d
more on manage access level
2005-08-18 02:25:10 +00:00
Pierangelo Masarati
b2284183f9
more on manage
2005-08-17 22:06:46 +00:00
Pierangelo Masarati
ec49990d51
ACIs almost entirely factored out of slapd
...
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
2005-08-17 17:14:57 +00:00
Pierangelo Masarati
69c6cd5365
fix small issues with dynacl and ACI in general
2005-08-17 14:44:41 +00:00
Pierangelo Masarati
f38e72b26c
trim use of uninitialized data; please review
2005-08-10 10:21:37 +00:00
Pierangelo Masarati
c3b977b2da
ACL logging was incomplete (and misleading)
2005-08-07 11:36:18 +00:00
Hallvard Furuseth
5a6eabb69d
Silence unused variable warnings
2005-07-27 08:52:32 +00:00
Pierangelo Masarati
d2b863fa24
fix previous commit (see NOTE and FIXMEs)
2005-07-23 10:29:40 +00:00
Luke Howard
9e4ea429e5
Add fe_access_allowed(), should allow global ACL overlays to work
2005-07-23 04:18:48 +00:00
Pierangelo Masarati
bccf2a7282
backout previous commit: frontendDB doesn't have the right rootn, ACLs and so
2005-07-22 17:22:51 +00:00
Luke Howard
6da978d5a0
Support for global ACL overlays, corresponding SLAPI support
2005-07-22 05:01:09 +00:00
Luke Howard
ffe20229dc
Move most of SLAPI frontend into overlay
2005-07-21 16:35:20 +00:00
Hallvard Furuseth
2b70a083e6
Delete unused variable.
2005-07-18 06:30:47 +00:00
Hallvard Furuseth
81ecb0b153
assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL).
2005-07-18 06:22:33 +00:00
Pierangelo Masarati
deec44b89a
fix further ITS#3830 issues; allow to specify a matching rule for non-DN match
2005-07-05 12:00:14 +00:00
Hallvard Furuseth
a1e27aae40
Format fix: Make style_strings[] global for debug output in dynacl_aci_parse()
2005-07-04 06:25:02 +00:00
Howard Chu
9c246fce39
ITS#3830, fix val-specific ACLs
2005-07-03 01:51:35 +00:00
Kurt Zeilenga
b703938d61
symbol rename for AIX (ITS#3787)
2005-06-16 19:17:38 +00:00
Howard Chu
8f58409749
Add SLAP_MOD_INTERNAL flag to Modifications, allow internal ops to bypass
...
ACL checks when modifying user-modifiable attributes as non-root user.
2005-06-04 09:44:39 +00:00
Howard Chu
f19a4ea9ec
More value ACL style tweaks
2005-05-10 00:51:28 +00:00
Pierangelo Masarati
a6f8cd07f6
partially revert previous commit (ITS#3652)
2005-04-13 01:03:46 +00:00
Pierangelo Masarati
a85603c10b
more on ITS#3652
2005-04-12 22:38:54 +00:00
Pierangelo Masarati
2430af4e8b
fix slapacl when doing cross-database access checking
2005-04-12 22:13:42 +00:00
Pierangelo Masarati
387864a9f2
cleanup previous commit
2005-04-12 19:35:53 +00:00
Pierangelo Masarati
d2dd3a616c
hide changes behind specific #ifdef, conditioned by LDAP_DEBUG; always allow access on back-dnssrv
2005-04-12 01:07:30 +00:00
Pierangelo Masarati
f103c78530
cleanup previous commit
2005-04-12 00:34:13 +00:00
Pierangelo Masarati
15016154b6
add ACL hook to overlays
2005-04-12 00:24:04 +00:00
Pierangelo Masarati
91b4e991be
cleanup & silence warnings
2005-04-11 21:35:34 +00:00
Pierangelo Masarati
4abbf9c610
implement add/delete granularity in write access (ITS#3631)
2005-04-08 00:18:24 +00:00
Pierangelo Masarati
e0fd9ebf14
cleanup previous commits
2005-04-04 11:19:21 +00:00
Pierangelo Masarati
3eb87b2faa
implement "realdn" by clause in ACLs (ITS#3627; accounting for Howard's remarks)
2005-04-03 01:59:03 +00:00
Pierangelo Masarati
584b21d20b
initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615)
2005-03-31 18:10:11 +00:00
Pierangelo Masarati
a96f2af281
more dnParent() and misc cleanup
2005-03-30 22:45:46 +00:00
Pierangelo Masarati
22bc85dc77
minor cleanup
2005-03-30 18:58:52 +00:00
Howard Chu
0076b40c32
Convert backendInfo/backendDB to STAILQs
2005-03-24 05:13:31 +00:00
Howard Chu
1e5f43ddd1
In aci_set_gather propagate op->o_private to subordinate search
2005-03-17 22:28:30 +00:00
Howard Chu
e0ca6e386e
Added acl_unparse, slap_sasl_getpolicy
2005-02-22 12:02:34 +00:00