Pierangelo Masarati
849ecbcf1f
allow options in dynacl configuration
2005-08-22 16:28:50 +00:00
Pierangelo Masarati
4bc8197dcb
further ACI factoring out & confinement
2005-08-22 16:03:35 +00:00
Pierangelo Masarati
3356017b93
complete ACI syntax exploitation
2005-08-19 00:25:18 +00:00
Pierangelo Masarati
add1add854
condition compile dynacl
2005-08-17 22:41:30 +00:00
Pierangelo Masarati
69c6cd5365
fix small issues with dynacl and ACI in general
2005-08-17 14:44:41 +00:00
Pierangelo Masarati
88e89bf4e7
cleanup
2005-08-17 08:08:23 +00:00
Pierangelo Masarati
682a1981a1
use macros instead of literals
2005-08-06 11:29:08 +00:00
Pierangelo Masarati
5ecdfd13b4
cleanup
2005-07-25 20:47:01 +00:00
Hallvard Furuseth
98a303fca9
Remove spurious fprintf arguments
2005-07-17 11:55:34 +00:00
Pierangelo Masarati
deec44b89a
fix further ITS#3830 issues; allow to specify a matching rule for non-DN match
2005-07-05 12:00:14 +00:00
Hallvard Furuseth
a1e27aae40
Format fix: Make style_strings[] global for debug output in dynacl_aci_parse()
2005-07-04 06:25:02 +00:00
Pierangelo Masarati
3a9fd69747
handle "dn=*" <what> clause
2005-05-23 20:29:01 +00:00
Howard Chu
f19a4ea9ec
More value ACL style tweaks
2005-05-10 00:51:28 +00:00
Howard Chu
29a37854bf
Fix acl_unparse - add missing style specifiers
2005-05-10 00:32:43 +00:00
Pierangelo Masarati
d23243a507
more on strict config parsing (ITS#3705)
2005-05-06 16:42:03 +00:00
Howard Chu
345ba007b8
Must always accept "base" for ACL_STYLE_BASE since that is always how
...
it gets unparsed.
2005-05-05 21:47:40 +00:00
Pierangelo Masarati
a7b82686a8
fix SIGSEGV when default style is used for "val" (ITS#3700)
2005-05-03 12:13:16 +00:00
Howard Chu
f5e36e1bbd
Fix dnattr unparsing
2005-04-21 07:15:02 +00:00
Howard Chu
b5ef8ea6f4
More modify support. ACL editing works.
2005-04-19 16:39:48 +00:00
Pierangelo Masarati
98294f1125
fix access unparse (ITS#3631)
2005-04-12 23:10:48 +00:00
Pierangelo Masarati
91b4e991be
cleanup & silence warnings
2005-04-11 21:35:34 +00:00
Pierangelo Masarati
53ce94a25d
protect all occurrences of ACL_DISCLOSE
2005-04-09 17:00:40 +00:00
Pierangelo Masarati
4abbf9c610
implement add/delete granularity in write access (ITS#3631)
2005-04-08 00:18:24 +00:00
Pierangelo Masarati
f1698e30f5
update diagnostics and man pages
2005-04-04 12:24:50 +00:00
Pierangelo Masarati
3eb87b2faa
implement "realdn" by clause in ACLs (ITS#3627; accounting for Howard's remarks)
2005-04-03 01:59:03 +00:00
Pierangelo Masarati
584b21d20b
initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615)
2005-03-31 18:10:11 +00:00
Howard Chu
a2a9ae725f
Drop "access " from acl_unparse
2005-03-01 23:17:54 +00:00
Howard Chu
e0ca6e386e
Added acl_unparse, slap_sasl_getpolicy
2005-02-22 12:02:34 +00:00
Pierangelo Masarati
b381e1bcc8
cosmetic changes
2005-01-12 14:25:08 +00:00
Pierangelo Masarati
b46518ff77
silence warning for global scoped global ACLs
2005-01-12 00:53:50 +00:00
Kurt Zeilenga
1c5d78d8dd
Add "disclose" and "manage" ACL levels (but no meat).
...
Disclose permission intended to be used for "disclose on error"
(as in our present "none"), none being "don't disclose on error".
Manage permission is intended to be used to allow DSA IT management
(e.g., changing entryCSNs, structuralObjectClass, etc.).
2005-01-08 05:26:18 +00:00
Kurt Zeilenga
dc0eacd40b
Happy New Year!
2005-01-01 20:49:32 +00:00
Pierangelo Masarati
564c34d131
fix ITS#3416
2004-12-03 08:41:06 +00:00
Pierangelo Masarati
8866a28fb3
don't yell at regex styling that wraps all the suffix in a submatch
2004-11-30 22:50:07 +00:00
Pierangelo Masarati
e79fbb88cf
move ACIs under a dynamic infrastructure that allows run-time loadable custom access control logic (needs work)
2004-11-20 01:27:03 +00:00
Pierangelo Masarati
947268c5ee
partially revert previous commit (the "creator" special DN pattern is redundant as "dnattr" is more expressive
2004-11-15 22:57:03 +00:00
Pierangelo Masarati
064eb88ef8
move special dn patterns to style enum; add creator special dn pattern
2004-11-15 22:15:28 +00:00
Pierangelo Masarati
6a9bf9765e
add URI search to sets; documentation to come...
2004-10-07 17:05:48 +00:00
Pierangelo Masarati
4afaf4042a
minor cleanup
2004-10-06 22:20:30 +00:00
Pierangelo Masarati
4204aee7b9
extend the availability of submatches to non-regex DN patterns
2004-10-06 22:03:33 +00:00
Pierangelo Masarati
cd9a9c628d
frontend stuff moved into a database structure, essentially to allow overlays to be processed before database selection; passes all tests (ITS#3080)
2004-07-26 21:26:34 +00:00
Hallvard Furuseth
b81b0216a9
Split string literal to keep it below ANSI C's allowed 509-char limit.
2004-07-18 00:47:35 +00:00
Kurt Zeilenga
372a941334
add baseObject as alias for base.
...
cleanup
2004-06-28 06:42:00 +00:00
Kurt Zeilenga
73202e3910
Fix typo in last commit
2004-06-18 19:12:00 +00:00
Pierangelo Masarati
42f3b3d87b
improve parsing - first step
2004-06-18 09:11:53 +00:00
Pierangelo Masarati
f109f1eb6d
fix ITS#3140
2004-05-12 23:29:42 +00:00
Pierangelo Masarati
d40e5a365a
fix DN_SEPARATOR() and clarify its use
2004-05-07 09:03:05 +00:00
Pierangelo Masarati
b34cf02488
more on fixing escaped semicolon in normalized DN
2004-05-07 02:18:08 +00:00
Pierangelo Masarati
dd0e285b12
experimental ACL scope correctness test
2004-04-20 19:16:21 +00:00
Kurt Zeilenga
44725e7303
use BER_BVNULL
2004-04-07 04:11:43 +00:00
