Howard Chu
7dcb68f6fa
Move CSN invocations to backends
2005-10-13 11:58:44 +00:00
Pierangelo Masarati
9129a2f7ee
silence warnings
2005-09-10 18:59:35 +00:00
Pierangelo Masarati
8e3adc2428
fix uninitialized, signedness and other issues (ITS#3854)
2005-08-26 16:52:51 +00:00
Pierangelo Masarati
4bc8197dcb
further ACI factoring out & confinement
2005-08-22 16:03:35 +00:00
Pierangelo Masarati
e066ec210e
merge sml_managing into sml_flags (SLAP_MOD_MANAGING)
2005-08-18 08:48:10 +00:00
Pierangelo Masarati
ef7421b87d
more on manage access level
2005-08-18 02:25:10 +00:00
Pierangelo Masarati
b2284183f9
more on manage
2005-08-17 22:06:46 +00:00
Pierangelo Masarati
ec49990d51
ACIs almost entirely factored out of slapd
...
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
2005-08-17 17:14:57 +00:00
Pierangelo Masarati
69c6cd5365
fix small issues with dynacl and ACI in general
2005-08-17 14:44:41 +00:00
Pierangelo Masarati
f38e72b26c
trim use of uninitialized data; please review
2005-08-10 10:21:37 +00:00
Pierangelo Masarati
c3b977b2da
ACL logging was incomplete (and misleading)
2005-08-07 11:36:18 +00:00
Hallvard Furuseth
5a6eabb69d
Silence unused variable warnings
2005-07-27 08:52:32 +00:00
Pierangelo Masarati
d2b863fa24
fix previous commit (see NOTE and FIXMEs)
2005-07-23 10:29:40 +00:00
Luke Howard
9e4ea429e5
Add fe_access_allowed(), should allow global ACL overlays to work
2005-07-23 04:18:48 +00:00
Pierangelo Masarati
bccf2a7282
backout previous commit: frontendDB doesn't have the right rootn, ACLs and so
2005-07-22 17:22:51 +00:00
Luke Howard
6da978d5a0
Support for global ACL overlays, corresponding SLAPI support
2005-07-22 05:01:09 +00:00
Luke Howard
ffe20229dc
Move most of SLAPI frontend into overlay
2005-07-21 16:35:20 +00:00
Hallvard Furuseth
2b70a083e6
Delete unused variable.
2005-07-18 06:30:47 +00:00
Hallvard Furuseth
81ecb0b153
assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL).
2005-07-18 06:22:33 +00:00
Pierangelo Masarati
deec44b89a
fix further ITS#3830 issues; allow to specify a matching rule for non-DN match
2005-07-05 12:00:14 +00:00
Hallvard Furuseth
a1e27aae40
Format fix: Make style_strings[] global for debug output in dynacl_aci_parse()
2005-07-04 06:25:02 +00:00
Howard Chu
9c246fce39
ITS#3830, fix val-specific ACLs
2005-07-03 01:51:35 +00:00
Kurt Zeilenga
b703938d61
symbol rename for AIX (ITS#3787)
2005-06-16 19:17:38 +00:00
Howard Chu
8f58409749
Add SLAP_MOD_INTERNAL flag to Modifications, allow internal ops to bypass
...
ACL checks when modifying user-modifiable attributes as non-root user.
2005-06-04 09:44:39 +00:00
Howard Chu
f19a4ea9ec
More value ACL style tweaks
2005-05-10 00:51:28 +00:00
Pierangelo Masarati
a6f8cd07f6
partially revert previous commit (ITS#3652)
2005-04-13 01:03:46 +00:00
Pierangelo Masarati
a85603c10b
more on ITS#3652
2005-04-12 22:38:54 +00:00
Pierangelo Masarati
2430af4e8b
fix slapacl when doing cross-database access checking
2005-04-12 22:13:42 +00:00
Pierangelo Masarati
387864a9f2
cleanup previous commit
2005-04-12 19:35:53 +00:00
Pierangelo Masarati
d2dd3a616c
hide changes behind specific #ifdef, conditioned by LDAP_DEBUG; always allow access on back-dnssrv
2005-04-12 01:07:30 +00:00
Pierangelo Masarati
f103c78530
cleanup previous commit
2005-04-12 00:34:13 +00:00
Pierangelo Masarati
15016154b6
add ACL hook to overlays
2005-04-12 00:24:04 +00:00
Pierangelo Masarati
91b4e991be
cleanup & silence warnings
2005-04-11 21:35:34 +00:00
Pierangelo Masarati
4abbf9c610
implement add/delete granularity in write access (ITS#3631)
2005-04-08 00:18:24 +00:00
Pierangelo Masarati
e0fd9ebf14
cleanup previous commits
2005-04-04 11:19:21 +00:00
Pierangelo Masarati
3eb87b2faa
implement "realdn" by clause in ACLs (ITS#3627; accounting for Howard's remarks)
2005-04-03 01:59:03 +00:00
Pierangelo Masarati
584b21d20b
initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615)
2005-03-31 18:10:11 +00:00
Pierangelo Masarati
a96f2af281
more dnParent() and misc cleanup
2005-03-30 22:45:46 +00:00
Pierangelo Masarati
22bc85dc77
minor cleanup
2005-03-30 18:58:52 +00:00
Howard Chu
0076b40c32
Convert backendInfo/backendDB to STAILQs
2005-03-24 05:13:31 +00:00
Howard Chu
1e5f43ddd1
In aci_set_gather propagate op->o_private to subordinate search
2005-03-17 22:28:30 +00:00
Howard Chu
e0ca6e386e
Added acl_unparse, slap_sasl_getpolicy
2005-02-22 12:02:34 +00:00
Pierangelo Masarati
b381e1bcc8
cosmetic changes
2005-01-12 14:25:08 +00:00
Kurt Zeilenga
1c5d78d8dd
Add "disclose" and "manage" ACL levels (but no meat).
...
Disclose permission intended to be used for "disclose on error"
(as in our present "none"), none being "don't disclose on error".
Manage permission is intended to be used to allow DSA IT management
(e.g., changing entryCSNs, structuralObjectClass, etc.).
2005-01-08 05:26:18 +00:00
Kurt Zeilenga
dc0eacd40b
Happy New Year!
2005-01-01 20:49:32 +00:00
Pierangelo Masarati
e891dbcdc4
fix dynacl compile
2004-11-26 00:34:48 +00:00
Howard Chu
90cc409325
Split Operation into Opheader and op
2004-11-25 22:59:00 +00:00
Howard Chu
3a5bde98ba
Disable back-bdb native syncrepl support, enable syncprov overlay,
...
remove syncrepl stuff from Operation struct
2004-11-25 21:16:54 +00:00
Pierangelo Masarati
dceaa05c0e
should fix compile when SLAPD_ACI_ENABLED is undefined
2004-11-23 21:20:13 +00:00
Pierangelo Masarati
f93d4a31e8
allow a "users" type in ACI
2004-11-20 14:07:07 +00:00
