Pierangelo Masarati
fdddeb1d8f
minor cleanup
2006-09-09 16:20:11 +00:00
Kurt Zeilenga
d3e288dffe
s/managedit/relax/
...
#unifdef -DSLAP_RELAX
2006-08-22 23:31:46 +00:00
Kurt Zeilenga
d9720d50dd
Some LDAP_DEVEL cleanup
2006-08-15 19:36:54 +00:00
Quanah Gibson-Mount
da1e743491
Minor typo fix (maintaned -> maintained)
2006-08-01 01:27:02 +00:00
Howard Chu
9a35796594
RE23 seems to still need these ACL states
2006-07-09 22:23:14 +00:00
Howard Chu
86f1f7e047
Cleanup unused fields from prev commit
2006-07-09 21:32:16 +00:00
Howard Chu
25c4b164a4
ITS#4253 fix value-dependent ACL caching - just record the ACL we'll start
...
looking for, don't cache anything else.
2006-07-09 20:51:00 +00:00
Howard Chu
c94c10a3b8
ITS#4587 fix for uniquemember/NameAndOptionalUID syntax
2006-07-09 10:21:42 +00:00
Ralf Haferkamp
e1d1d32402
Do "selfwrite" check independent of other <who> clauses (ITS#4587)
2006-06-27 15:26:08 +00:00
Pierangelo Masarati
c0d95f08c1
record value-dependent state for acl_mask_dn() (ITS#4587)
2006-06-14 18:33:02 +00:00
Pierangelo Masarati
f6e4f20254
test for ITS#4587; another bit of fix for that
2006-06-13 08:53:34 +00:00
Howard Chu
adba963c32
ITS#4587, selfwrite should apply to more than just USERS acl's
2006-06-13 03:19:07 +00:00
Hallvard Furuseth
2c3a06321a
2006-05-25 15:59:21 +00:00
Howard Chu
b41f2cad74
Fix dynacl tgrant/tdeny initialization
2006-05-08 09:06:37 +00:00
Kurt Zeilenga
eb9a3c1876
unifdef -DSLAP_ACL_HONOR_DISCLOSE
...
unifdef -DSLAP_ACL_HONOR_MANAGE
unifdef -DSLAP_OVERLAY_ACCESS
unifdef -DSLAP_ORDERED_PRETTYNORM
unifdef -DSLAP_AUTHZ_SYNTAX
Move LDAP_COLLECTIVE_ATTRIBUTES, LDAP_COMP_MATCH, and LDAP_SYNC_TIMESTAMP
back behind LDAP_DEVEL (as these either too experimental or not yet
implemented).
2006-04-12 05:53:26 +00:00
Pierangelo Masarati
a54ca7a6ce
factor ACI code out of slapd; now it can only use dynacl layer
2006-01-06 17:12:35 +00:00
Pierangelo Masarati
8c0ad9021a
fix self<access> for "users" (ITS#4299)
2006-01-04 00:52:07 +00:00
Kurt Zeilenga
acbb5cf689
Happy new year!
2006-01-03 23:11:52 +00:00
Luke Howard
cbf33d4fb1
Handle LDAP_MOD_INCREMENT in acl_check_modlist()
2005-12-24 16:02:15 +00:00
Pierangelo Masarati
da03eb0390
normalize value in "exact" attrval clause (ITS#4255)
2005-12-09 10:33:01 +00:00
Howard Chu
b831ebba7d
ITS#4218 streamline frontend/overlay access_allowed. Probably need to
...
do the same for acl_group and acl_attribute.
2005-11-26 07:53:07 +00:00
Pierangelo Masarati
d34fffcaf9
use lutil_ato*() whenever appropriate
2005-11-24 01:10:05 +00:00
Pierangelo Masarati
4537065ffc
further isolation and cleanup of ACI code
2005-11-10 00:52:43 +00:00
Howard Chu
7dcb68f6fa
Move CSN invocations to backends
2005-10-13 11:58:44 +00:00
Pierangelo Masarati
9129a2f7ee
silence warnings
2005-09-10 18:59:35 +00:00
Pierangelo Masarati
8e3adc2428
fix uninitialized, signedness and other issues (ITS#3854)
2005-08-26 16:52:51 +00:00
Pierangelo Masarati
4bc8197dcb
further ACI factoring out & confinement
2005-08-22 16:03:35 +00:00
Pierangelo Masarati
e066ec210e
merge sml_managing into sml_flags (SLAP_MOD_MANAGING)
2005-08-18 08:48:10 +00:00
Pierangelo Masarati
ef7421b87d
more on manage access level
2005-08-18 02:25:10 +00:00
Pierangelo Masarati
b2284183f9
more on manage
2005-08-17 22:06:46 +00:00
Pierangelo Masarati
ec49990d51
ACIs almost entirely factored out of slapd
...
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
2005-08-17 17:14:57 +00:00
Pierangelo Masarati
69c6cd5365
fix small issues with dynacl and ACI in general
2005-08-17 14:44:41 +00:00
Pierangelo Masarati
f38e72b26c
trim use of uninitialized data; please review
2005-08-10 10:21:37 +00:00
Pierangelo Masarati
c3b977b2da
ACL logging was incomplete (and misleading)
2005-08-07 11:36:18 +00:00
Hallvard Furuseth
5a6eabb69d
Silence unused variable warnings
2005-07-27 08:52:32 +00:00
Pierangelo Masarati
d2b863fa24
fix previous commit (see NOTE and FIXMEs)
2005-07-23 10:29:40 +00:00
Luke Howard
9e4ea429e5
Add fe_access_allowed(), should allow global ACL overlays to work
2005-07-23 04:18:48 +00:00
Pierangelo Masarati
bccf2a7282
backout previous commit: frontendDB doesn't have the right rootn, ACLs and so
2005-07-22 17:22:51 +00:00
Luke Howard
6da978d5a0
Support for global ACL overlays, corresponding SLAPI support
2005-07-22 05:01:09 +00:00
Luke Howard
ffe20229dc
Move most of SLAPI frontend into overlay
2005-07-21 16:35:20 +00:00
Hallvard Furuseth
2b70a083e6
Delete unused variable.
2005-07-18 06:30:47 +00:00
Hallvard Furuseth
81ecb0b153
assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL).
2005-07-18 06:22:33 +00:00
Pierangelo Masarati
deec44b89a
fix further ITS#3830 issues; allow to specify a matching rule for non-DN match
2005-07-05 12:00:14 +00:00
Hallvard Furuseth
a1e27aae40
Format fix: Make style_strings[] global for debug output in dynacl_aci_parse()
2005-07-04 06:25:02 +00:00
Howard Chu
9c246fce39
ITS#3830, fix val-specific ACLs
2005-07-03 01:51:35 +00:00
Kurt Zeilenga
b703938d61
symbol rename for AIX (ITS#3787)
2005-06-16 19:17:38 +00:00
Howard Chu
8f58409749
Add SLAP_MOD_INTERNAL flag to Modifications, allow internal ops to bypass
...
ACL checks when modifying user-modifiable attributes as non-root user.
2005-06-04 09:44:39 +00:00
Howard Chu
f19a4ea9ec
More value ACL style tweaks
2005-05-10 00:51:28 +00:00
Pierangelo Masarati
a6f8cd07f6
partially revert previous commit (ITS#3652)
2005-04-13 01:03:46 +00:00
Pierangelo Masarati
a85603c10b
more on ITS#3652
2005-04-12 22:38:54 +00:00
