Revert "ITS#6688 enforce search ACL in back-perl"

[openldap] / servers / slapd / back-perl / search.c

diff --git a/servers/slapd/back-perl/search.c b/servers/slapd/back-perl/search.c
index bedc09f9c9be6ce4398822a23a49c4dbb9c53781..9d209ebd9831080ede33c35cb576f1e41191fa0f 100644 (file)
--- a/servers/slapd/back-perl/search.c
+++ b/servers/slapd/back-perl/search.c
@@ -1,24 +1,20 @@
 /* $OpenLDAP$ */
-/*
- *      Copyright 1999, John C. Quillan, All rights reserved.
+/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
  *
- *      Redistribution and use in source and binary forms are permitted only
- *      as authorized by the OpenLDAP Public License.  A copy of this
- *      license is available at http://www.OpenLDAP.org/license.html or
- *      in file LICENSE in the top-level directory of the distribution.
+ * Copyright 1999-2011 The OpenLDAP Foundation.
+ * Portions Copyright 1999 John C. Quillan.
+ * Portions Copyright 2002 myinternet Limited.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted only as authorized by the OpenLDAP
+ * Public License.
+ *
+ * A copy of this license is available in file LICENSE in the
+ * top-level directory of the distribution or, alternatively, at
+ * <http://www.OpenLDAP.org/license.html>.
  */
 
-#include "portable.h"
-
-#include <stdio.h>
-/*     #include <ac/types.h>
-       #include <ac/socket.h>
-*/
-
-#include <EXTERN.h>
-#include <perl.h>
-
-#include "slap.h"
 #include "perl_back.h"
 
 /**********************************************************
@@ -28,32 +24,17 @@
  **********************************************************/
 int
 perl_back_search(
-       Backend *be,
-       Connection *conn,
        Operation *op,
-       struct berval *base,
-       struct berval *nbase,
-       int scope,
-       int deref,
-       int sizelimit,
-       int timelimit,
-       Filter *filter,
-       struct berval *filterstr,
-       AttributeName *attrs,
-       int attrsonly
-       )
+       SlapReply *rs )
 {
-       char test[500];
+       PerlBackend *perl_back = (PerlBackend *)op->o_bd->be_private;
        int count ;
-       int err = 0;
-       char *matched = NULL, *info = NULL;
-       PerlBackend *perl_back = (PerlBackend *)be->be_private;
        AttributeName *an;
        Entry   *e;
        char *buf;
        int i;
-       int return_code;
 
+       PERL_SET_CONTEXT( PERL_INTERPRETER );
        ldap_pvt_thread_mutex_lock( &perl_interpreter_mutex );  
 
        {
@@ -61,17 +42,20 @@ perl_back_search(
 
                PUSHMARK(sp) ;
                XPUSHs( perl_back->pb_obj_ref );
-               XPUSHs(sv_2mortal(newSVpv( filterstr->bv_val , 0)));
-               XPUSHs(sv_2mortal(newSViv( sizelimit )));
-               XPUSHs(sv_2mortal(newSViv( timelimit )));
-               XPUSHs(sv_2mortal(newSViv( attrsonly )));
-
-               for ( an = attrs; an && an->an_name.bv_val; an++ ) {
+               XPUSHs(sv_2mortal(newSVpv( op->o_req_ndn.bv_val , 0)));
+               XPUSHs(sv_2mortal(newSViv( op->ors_scope )));
+               XPUSHs(sv_2mortal(newSViv( op->ors_deref )));
+               XPUSHs(sv_2mortal(newSViv( op->ors_slimit )));
+               XPUSHs(sv_2mortal(newSViv( op->ors_tlimit )));
+               XPUSHs(sv_2mortal(newSVpv( op->ors_filterstr.bv_val , 0)));
+               XPUSHs(sv_2mortal(newSViv( op->ors_attrsonly )));
+
+               for ( an = op->ors_attrs; an && an->an_name.bv_val; an++ ) {
                        XPUSHs(sv_2mortal(newSVpv( an->an_name.bv_val , 0)));
                }
                PUTBACK;
 
-               count = perl_call_method("search", G_ARRAY );
+               count = call_method("search", G_ARRAY );
 
                SPAGAIN;
 
@@ -89,9 +73,27 @@ perl_back_search(
                                        Debug( LDAP_DEBUG_ANY, "str2entry(%s) failed\n", buf, 0, 0 );
 
                                } else {
-                                       send_search_entry( be, conn, op,
-                                               e, attrs, attrsonly, NULL );
-                                                        
+                                       int send_entry;
+
+                                       if (perl_back->pb_filter_search_results)
+                                               send_entry = (test_filter( op, e, op->ors_filter ) == LDAP_COMPARE_TRUE);
+                                       else
+                                               send_entry = 1;
+
+                                       if (send_entry) {
+                                               rs->sr_entry = e;
+                                               rs->sr_attrs = op->ors_attrs;
+                                               rs->sr_flags = REP_ENTRY_MODIFIABLE;
+                                               rs->sr_err = LDAP_SUCCESS;
+                                               rs->sr_err = send_search_entry( op, rs );
+                                               rs->sr_flags = 0;
+                                               rs->sr_attrs = NULL;
+                                               rs->sr_entry = NULL;
+                                               if ( rs->sr_err == LDAP_SIZELIMIT_EXCEEDED ) {
+                                                       goto done;
+                                               }
+                                       }
+
                                        entry_free( e );
                                }
                        }
@@ -106,22 +108,15 @@ perl_back_search(
                 * ex stack: <$res_2> <$res_1> <0>
                 */
 
-               return_code = POPi;
-
-
+               rs->sr_err = POPi;
 
+done:;
                PUTBACK; FREETMPS; LEAVE;
        }
 
        ldap_pvt_thread_mutex_unlock( &perl_interpreter_mutex );        
 
-       if( return_code != 0 ) {
-               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR,
-                       NULL, NULL, NULL, NULL );
+       send_ldap_result( op, rs );
 
-       } else {
-               send_ldap_result( conn, op, LDAP_SUCCESS,
-                       NULL, NULL, NULL, NULL );
-       }
+       return 0;
 }
-