Commit Graph

322 Commits

Author SHA1 Message Date
Pierangelo Masarati
4b9f4c688a allow to specify the required access privileges in internal operations (ITS#4806) 2007-01-16 22:13:44 +00:00
Kurt Zeilenga
da6d9eb046 happy new year 2007-01-02 20:00:42 +00:00
Pierangelo Masarati
186d30288d silence warning 2006-12-24 15:43:01 +00:00
Pierangelo Masarati
8830e0628e more portable fix to ITS#4756 2006-12-17 22:03:03 +00:00
Pierangelo Masarati
97e6225cc9 implement full IPv6 support in ACLs; use URL notation (as suggested by Howard) to disambiguate parsing (ITS#4756) 2006-12-15 01:11:11 +00:00
Pierangelo Masarati
fdddeb1d8f minor cleanup 2006-09-09 16:20:11 +00:00
Kurt Zeilenga
d3e288dffe s/managedit/relax/
#unifdef -DSLAP_RELAX
2006-08-22 23:31:46 +00:00
Kurt Zeilenga
d9720d50dd Some LDAP_DEVEL cleanup 2006-08-15 19:36:54 +00:00
Quanah Gibson-Mount
da1e743491 Minor typo fix (maintaned -> maintained) 2006-08-01 01:27:02 +00:00
Howard Chu
9a35796594 RE23 seems to still need these ACL states 2006-07-09 22:23:14 +00:00
Howard Chu
86f1f7e047 Cleanup unused fields from prev commit 2006-07-09 21:32:16 +00:00
Howard Chu
25c4b164a4 ITS#4253 fix value-dependent ACL caching - just record the ACL we'll start
looking for, don't cache anything else.
2006-07-09 20:51:00 +00:00
Howard Chu
c94c10a3b8 ITS#4587 fix for uniquemember/NameAndOptionalUID syntax 2006-07-09 10:21:42 +00:00
Ralf Haferkamp
e1d1d32402 Do "selfwrite" check independent of other <who> clauses (ITS#4587) 2006-06-27 15:26:08 +00:00
Pierangelo Masarati
c0d95f08c1 record value-dependent state for acl_mask_dn() (ITS#4587) 2006-06-14 18:33:02 +00:00
Pierangelo Masarati
f6e4f20254 test for ITS#4587; another bit of fix for that 2006-06-13 08:53:34 +00:00
Howard Chu
adba963c32 ITS#4587, selfwrite should apply to more than just USERS acl's 2006-06-13 03:19:07 +00:00
Hallvard Furuseth
2c3a06321a 2006-05-25 15:59:21 +00:00
Howard Chu
b41f2cad74 Fix dynacl tgrant/tdeny initialization 2006-05-08 09:06:37 +00:00
Kurt Zeilenga
eb9a3c1876 unifdef -DSLAP_ACL_HONOR_DISCLOSE
unifdef -DSLAP_ACL_HONOR_MANAGE
unifdef -DSLAP_OVERLAY_ACCESS
unifdef -DSLAP_ORDERED_PRETTYNORM
unifdef -DSLAP_AUTHZ_SYNTAX
Move LDAP_COLLECTIVE_ATTRIBUTES, LDAP_COMP_MATCH, and LDAP_SYNC_TIMESTAMP
back behind LDAP_DEVEL (as these either too experimental or not yet
implemented).
2006-04-12 05:53:26 +00:00
Pierangelo Masarati
a54ca7a6ce factor ACI code out of slapd; now it can only use dynacl layer 2006-01-06 17:12:35 +00:00
Pierangelo Masarati
8c0ad9021a fix self<access> for "users" (ITS#4299) 2006-01-04 00:52:07 +00:00
Kurt Zeilenga
acbb5cf689 Happy new year! 2006-01-03 23:11:52 +00:00
Luke Howard
cbf33d4fb1 Handle LDAP_MOD_INCREMENT in acl_check_modlist() 2005-12-24 16:02:15 +00:00
Pierangelo Masarati
da03eb0390 normalize value in "exact" attrval clause (ITS#4255) 2005-12-09 10:33:01 +00:00
Howard Chu
b831ebba7d ITS#4218 streamline frontend/overlay access_allowed. Probably need to
do the same for acl_group and acl_attribute.
2005-11-26 07:53:07 +00:00
Pierangelo Masarati
d34fffcaf9 use lutil_ato*() whenever appropriate 2005-11-24 01:10:05 +00:00
Pierangelo Masarati
4537065ffc further isolation and cleanup of ACI code 2005-11-10 00:52:43 +00:00
Howard Chu
7dcb68f6fa Move CSN invocations to backends 2005-10-13 11:58:44 +00:00
Pierangelo Masarati
9129a2f7ee silence warnings 2005-09-10 18:59:35 +00:00
Pierangelo Masarati
8e3adc2428 fix uninitialized, signedness and other issues (ITS#3854) 2005-08-26 16:52:51 +00:00
Pierangelo Masarati
4bc8197dcb further ACI factoring out & confinement 2005-08-22 16:03:35 +00:00
Pierangelo Masarati
e066ec210e merge sml_managing into sml_flags (SLAP_MOD_MANAGING) 2005-08-18 08:48:10 +00:00
Pierangelo Masarati
ef7421b87d more on manage access level 2005-08-18 02:25:10 +00:00
Pierangelo Masarati
b2284183f9 more on manage 2005-08-17 22:06:46 +00:00
Pierangelo Masarati
ec49990d51 ACIs almost entirely factored out of slapd
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
2005-08-17 17:14:57 +00:00
Pierangelo Masarati
69c6cd5365 fix small issues with dynacl and ACI in general 2005-08-17 14:44:41 +00:00
Pierangelo Masarati
f38e72b26c trim use of uninitialized data; please review 2005-08-10 10:21:37 +00:00
Pierangelo Masarati
c3b977b2da ACL logging was incomplete (and misleading) 2005-08-07 11:36:18 +00:00
Hallvard Furuseth
5a6eabb69d Silence unused variable warnings 2005-07-27 08:52:32 +00:00
Pierangelo Masarati
d2b863fa24 fix previous commit (see NOTE and FIXMEs) 2005-07-23 10:29:40 +00:00
Luke Howard
9e4ea429e5 Add fe_access_allowed(), should allow global ACL overlays to work 2005-07-23 04:18:48 +00:00
Pierangelo Masarati
bccf2a7282 backout previous commit: frontendDB doesn't have the right rootn, ACLs and so 2005-07-22 17:22:51 +00:00
Luke Howard
6da978d5a0 Support for global ACL overlays, corresponding SLAPI support 2005-07-22 05:01:09 +00:00
Luke Howard
ffe20229dc Move most of SLAPI frontend into overlay 2005-07-21 16:35:20 +00:00
Hallvard Furuseth
2b70a083e6 Delete unused variable. 2005-07-18 06:30:47 +00:00
Hallvard Furuseth
81ecb0b153 assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL). 2005-07-18 06:22:33 +00:00
Pierangelo Masarati
deec44b89a fix further ITS#3830 issues; allow to specify a matching rule for non-DN match 2005-07-05 12:00:14 +00:00
Hallvard Furuseth
a1e27aae40 Format fix: Make style_strings[] global for debug output in dynacl_aci_parse() 2005-07-04 06:25:02 +00:00
Howard Chu
9c246fce39 ITS#3830, fix val-specific ACLs 2005-07-03 01:51:35 +00:00