Pierangelo Masarati
b381e1bcc8
cosmetic changes
2005-01-12 14:25:08 +00:00
Kurt Zeilenga
1c5d78d8dd
Add "disclose" and "manage" ACL levels (but no meat).
...
Disclose permission intended to be used for "disclose on error"
(as in our present "none"), none being "don't disclose on error".
Manage permission is intended to be used to allow DSA IT management
(e.g., changing entryCSNs, structuralObjectClass, etc.).
2005-01-08 05:26:18 +00:00
Kurt Zeilenga
dc0eacd40b
Happy New Year!
2005-01-01 20:49:32 +00:00
Pierangelo Masarati
e891dbcdc4
fix dynacl compile
2004-11-26 00:34:48 +00:00
Howard Chu
90cc409325
Split Operation into Opheader and op
2004-11-25 22:59:00 +00:00
Howard Chu
3a5bde98ba
Disable back-bdb native syncrepl support, enable syncprov overlay,
...
remove syncrepl stuff from Operation struct
2004-11-25 21:16:54 +00:00
Pierangelo Masarati
dceaa05c0e
should fix compile when SLAPD_ACI_ENABLED is undefined
2004-11-23 21:20:13 +00:00
Pierangelo Masarati
f93d4a31e8
allow a "users" type in ACI
2004-11-20 14:07:07 +00:00
Pierangelo Masarati
cc0353610f
more cleanup and ITS number
2004-11-20 12:12:57 +00:00
Pierangelo Masarati
c75386a279
cleanup fix to ITS#3303
2004-11-20 12:07:39 +00:00
Pierangelo Masarati
40762c524a
fix ITS#3303
2004-11-20 11:55:46 +00:00
Pierangelo Masarati
1e650374c2
add more semantics to the "type" field; fix a bug in anonymous operations; treat children aci_mask() as internal searches
2004-11-20 11:45:05 +00:00
Pierangelo Masarati
e79fbb88cf
move ACIs under a dynamic infrastructure that allows run-time loadable custom access control logic (needs work)
2004-11-20 01:27:03 +00:00
Pierangelo Masarati
947268c5ee
partially revert previous commit (the "creator" special DN pattern is redundant as "dnattr" is more expressive
2004-11-15 22:57:03 +00:00
Pierangelo Masarati
064eb88ef8
move special dn patterns to style enum; add creator special dn pattern
2004-11-15 22:15:28 +00:00
Pierangelo Masarati
9eabe1365b
improve memory allocation in sets
2004-10-08 15:07:22 +00:00
Pierangelo Masarati
2f6f6f6a07
"optimize" sets: since the attr part must be an attribute, use the AttributeDescription
2004-10-08 00:28:16 +00:00
Pierangelo Masarati
58edfcca31
improve previous commit
2004-10-07 23:38:17 +00:00
Pierangelo Masarati
aa2e9413f1
fix previous commit
2004-10-07 22:31:36 +00:00
Pierangelo Masarati
e5ade14256
improve previous commit; now attrs in URI, if any, are added to that in the [<dn>]/<attr> form
2004-10-07 20:44:01 +00:00
Pierangelo Masarati
6a9bf9765e
add URI search to sets; documentation to come...
2004-10-07 17:05:48 +00:00
Pierangelo Masarati
2b74930cb0
s/free/slap_sl_free/
2004-10-06 23:53:30 +00:00
Pierangelo Masarati
4204aee7b9
extend the availability of submatches to non-regex DN patterns
2004-10-06 22:03:33 +00:00
Pierangelo Masarati
6ef9689b3f
fix string_expand error cases; cleanup
2004-10-04 20:52:58 +00:00
Kurt Zeilenga
d611a4b49a
unifdef -UNEW_LOGGING
2004-09-04 04:54:28 +00:00
Howard Chu
91033d6552
Reworked fix for ITS#3140 - add access parameter to backend_attribute
2004-08-18 17:14:22 +00:00
Pierangelo Masarati
bfb6465533
cleanup
2004-08-06 16:40:15 +00:00
Pierangelo Masarati
cd9a9c628d
frontend stuff moved into a database structure, essentially to allow overlays to be processed before database selection; passes all tests (ITS#3080)
2004-07-26 21:26:34 +00:00
Pierangelo Masarati
74f224583b
quick fix for ITS#3215; needs work to re-enable ACI caching, if possible at all
2004-07-02 16:45:06 +00:00
Pierangelo Masarati
6465801cfc
beautify comment
2004-06-30 16:26:06 +00:00
Pierangelo Masarati
f109f1eb6d
fix ITS#3140
2004-05-12 23:29:42 +00:00
Pierangelo Masarati
d40e5a365a
fix DN_SEPARATOR() and clarify its use
2004-05-07 09:03:05 +00:00
Pierangelo Masarati
b34cf02488
more on fixing escaped semicolon in normalized DN
2004-05-07 02:18:08 +00:00
Pierangelo Masarati
b69a2acdf5
use fist backend only if there is no global ACL (ITS#3100)
2004-04-20 19:26:02 +00:00
Pierangelo Masarati
1c952c8a7e
revert prevuos NULL o_bd commit
2004-04-20 15:18:06 +00:00
Pierangelo Masarati
30f697beeb
improve dn.one="" fix
2004-04-20 14:50:16 +00:00
Pierangelo Masarati
537a4cae02
global ACLs were not used because op->o_bd is set to &backends[0] if NULL
2004-04-20 14:42:48 +00:00
Pierangelo Masarati
3c5f305a7f
fix acl bug when using dn.one=""
2004-04-20 14:15:39 +00:00
Kurt Zeilenga
1372965d89
ITS#3092: Rename sl_free() and friends to slap_sl_free()
2004-04-20 03:44:57 +00:00
Pierangelo Masarati
7b65d46b1b
add slapacl tool
2004-04-20 00:08:44 +00:00
Kurt Zeilenga
c7f0438044
bvalue cleanup
2004-04-08 06:49:17 +00:00
Kurt Zeilenga
44725e7303
use BER_BVNULL
2004-04-07 04:11:43 +00:00
Kurt Zeilenga
c7e89d57be
swap be_isroot and be_isroot_dn symbols
2004-04-06 01:06:20 +00:00
Pierangelo Masarati
e516247068
exploit new isroot_dn helper
2004-04-05 17:31:27 +00:00
Howard Chu
35c774d3b8
Yet more for ITS#3008. Seems to work properly now.
2004-03-10 09:11:20 +00:00
Howard Chu
3853fade60
More for ITS#3008
2004-03-10 08:00:41 +00:00
Howard Chu
cac30b1855
ITS#3008 fix value-based ACLs
2004-03-10 02:59:03 +00:00
Pierangelo Masarati
006745430e
allow "expand" style in peername, sockname, sockurl as well; more sanity checks
2004-03-09 19:44:14 +00:00
Pierangelo Masarati
042869366d
use "expand" instead of "regex" for group ACLs that allow substring expansion, preserving backwards compatibility; add sanity checks
2004-03-09 16:33:05 +00:00
Pierangelo Masarati
a4e062ca36
apply advanced peername ACL (ITS#2907)
2004-03-08 18:49:12 +00:00
