mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2024-12-27 03:20:22 +08:00
Code Issues Packages Projects Releases Wiki Activity
13,990 Commits 38 Branches 307 Tags 74 MiB
5b26601fd0
Commit Graph

298 Commits

Author SHA1 Message Date
Pierangelo Masarati
da03eb0390 normalize value in "exact" attrval clause (ITS#4255) 2005-12-09 10:33:01 +00:00
Howard Chu
b831ebba7d ITS#4218 streamline frontend/overlay access_allowed. Probably need to 
do the same for acl_group and acl_attribute.
 2005-11-26 07:53:07 +00:00
Pierangelo Masarati
d34fffcaf9 use lutil_ato*() whenever appropriate 2005-11-24 01:10:05 +00:00
Pierangelo Masarati
4537065ffc further isolation and cleanup of ACI code 2005-11-10 00:52:43 +00:00
Howard Chu
7dcb68f6fa Move CSN invocations to backends 2005-10-13 11:58:44 +00:00
Pierangelo Masarati
9129a2f7ee silence warnings 2005-09-10 18:59:35 +00:00
Pierangelo Masarati
8e3adc2428 fix uninitialized, signedness and other issues (ITS#3854) 2005-08-26 16:52:51 +00:00
Pierangelo Masarati
4bc8197dcb further ACI factoring out & confinement 2005-08-22 16:03:35 +00:00
Pierangelo Masarati
e066ec210e merge sml_managing into sml_flags (SLAP_MOD_MANAGING) 2005-08-18 08:48:10 +00:00
Pierangelo Masarati
ef7421b87d more on manage access level 2005-08-18 02:25:10 +00:00
Pierangelo Masarati
b2284183f9 more on manage 2005-08-17 22:06:46 +00:00
Pierangelo Masarati
ec49990d51 ACIs almost entirely factored out of slapd 
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
 2005-08-17 17:14:57 +00:00
Pierangelo Masarati
69c6cd5365 fix small issues with dynacl and ACI in general 2005-08-17 14:44:41 +00:00
Pierangelo Masarati
f38e72b26c trim use of uninitialized data; please review 2005-08-10 10:21:37 +00:00
Pierangelo Masarati
c3b977b2da ACL logging was incomplete (and misleading) 2005-08-07 11:36:18 +00:00
Hallvard Furuseth
5a6eabb69d Silence unused variable warnings 2005-07-27 08:52:32 +00:00
Pierangelo Masarati
d2b863fa24 fix previous commit (see NOTE and FIXMEs) 2005-07-23 10:29:40 +00:00
Luke Howard
9e4ea429e5 Add fe_access_allowed(), should allow global ACL overlays to work 2005-07-23 04:18:48 +00:00
Pierangelo Masarati
bccf2a7282 backout previous commit: frontendDB doesn't have the right rootn, ACLs and so 2005-07-22 17:22:51 +00:00
Luke Howard
6da978d5a0 Support for global ACL overlays, corresponding SLAPI support 2005-07-22 05:01:09 +00:00
Luke Howard
ffe20229dc Move most of SLAPI frontend into overlay 2005-07-21 16:35:20 +00:00
Hallvard Furuseth
2b70a083e6 Delete unused variable. 2005-07-18 06:30:47 +00:00
Hallvard Furuseth
81ecb0b153 assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL). 2005-07-18 06:22:33 +00:00
Pierangelo Masarati
deec44b89a fix further ITS#3830 issues; allow to specify a matching rule for non-DN match 2005-07-05 12:00:14 +00:00
Hallvard Furuseth
a1e27aae40 Format fix: Make style_strings[] global for debug output in dynacl_aci_parse() 2005-07-04 06:25:02 +00:00
Howard Chu
9c246fce39 ITS#3830, fix val-specific ACLs 2005-07-03 01:51:35 +00:00
Kurt Zeilenga
b703938d61 symbol rename for AIX (ITS#3787) 2005-06-16 19:17:38 +00:00
Howard Chu
8f58409749 Add SLAP_MOD_INTERNAL flag to Modifications, allow internal ops to bypass 
ACL checks when modifying user-modifiable attributes as non-root user.
 2005-06-04 09:44:39 +00:00
Howard Chu
f19a4ea9ec More value ACL style tweaks 2005-05-10 00:51:28 +00:00
Pierangelo Masarati
a6f8cd07f6 partially revert previous commit (ITS#3652) 2005-04-13 01:03:46 +00:00
Pierangelo Masarati
a85603c10b more on ITS#3652 2005-04-12 22:38:54 +00:00
Pierangelo Masarati
2430af4e8b fix slapacl when doing cross-database access checking 2005-04-12 22:13:42 +00:00
Pierangelo Masarati
387864a9f2 cleanup previous commit 2005-04-12 19:35:53 +00:00
Pierangelo Masarati
d2dd3a616c hide changes behind specific #ifdef, conditioned by LDAP_DEBUG; always allow access on back-dnssrv 2005-04-12 01:07:30 +00:00
Pierangelo Masarati
f103c78530 cleanup previous commit 2005-04-12 00:34:13 +00:00
Pierangelo Masarati
15016154b6 add ACL hook to overlays 2005-04-12 00:24:04 +00:00
Pierangelo Masarati
91b4e991be cleanup & silence warnings 2005-04-11 21:35:34 +00:00
Pierangelo Masarati
4abbf9c610 implement add/delete granularity in write access (ITS#3631) 2005-04-08 00:18:24 +00:00
Pierangelo Masarati
e0fd9ebf14 cleanup previous commits 2005-04-04 11:19:21 +00:00
Pierangelo Masarati
3eb87b2faa implement "realdn" by clause in ACLs (ITS#3627; accounting for Howard's remarks) 2005-04-03 01:59:03 +00:00
Pierangelo Masarati
584b21d20b initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615) 2005-03-31 18:10:11 +00:00
Pierangelo Masarati
a96f2af281 more dnParent() and misc cleanup 2005-03-30 22:45:46 +00:00
Pierangelo Masarati
22bc85dc77 minor cleanup 2005-03-30 18:58:52 +00:00
Howard Chu
0076b40c32 Convert backendInfo/backendDB to STAILQs 2005-03-24 05:13:31 +00:00
Howard Chu
1e5f43ddd1 In aci_set_gather propagate op->o_private to subordinate search 2005-03-17 22:28:30 +00:00
Howard Chu
e0ca6e386e Added acl_unparse, slap_sasl_getpolicy 2005-02-22 12:02:34 +00:00
Pierangelo Masarati
b381e1bcc8 cosmetic changes 2005-01-12 14:25:08 +00:00
Kurt Zeilenga
1c5d78d8dd Add "disclose" and "manage" ACL levels (but no meat). 
Disclose permission intended to be used for "disclose on error"
(as in our present "none"), none being "don't disclose on error".

Manage permission is intended to be used to allow DSA IT management
(e.g., changing entryCSNs, structuralObjectClass, etc.).
 2005-01-08 05:26:18 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Pierangelo Masarati
e891dbcdc4 fix dynacl compile 2004-11-26 00:34:48 +00:00