Treat access to dn="" as access to dn.base="". Avoid empty regex.

[openldap] / servers / slapd / acl.c

diff --git a/servers/slapd/acl.c b/servers/slapd/acl.c
index 5f62a291296e6472e514f23b0b9b5204c888ced6..744b416a66e6a04aba8b3439fbb6e123c8feceff 100644 (file)
--- a/servers/slapd/acl.c
+++ b/servers/slapd/acl.c
@@ -1151,6 +1151,10 @@ acl_check_modlist(
                        }
                        break;
 
+               case SLAP_MOD_SOFTADD:
+                       /* allow adding attribute via modrdn thru */
+                       break;
+
                default:
                        assert( 0 );
                        return( 0 );