]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/mods.c
ITS#3576 use actual backend (not glue instance) for restriction and
[openldap] / servers / slapd / mods.c
index 8a40ef301a46fc5904e715034e36832c0f1f66ff..6e7d7ec1c5b8e1e42f227d37253cf8a831bac9dd 100644 (file)
@@ -1,7 +1,7 @@
 /* $OpenLDAP$ */
 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
  *
- * Copyright 1998-2004 The OpenLDAP Foundation.
+ * Copyright 1998-2005 The OpenLDAP Foundation.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
 
 int
 modify_add_values(
-       Entry   *e,
+       Entry           *e,
        Modification    *mod,
-       int     permissive,
+       int             permissive,
        const char      **text,
-       char *textbuf, size_t textlen )
+       char            *textbuf,
+       size_t          textlen )
 {
-       int             i, j;
-       int             matched;
+       int             rc;
+       const char      *op;
        Attribute       *a;
-       MatchingRule *mr = mod->sm_desc->ad_type->sat_equality;
-       const char *op;
+       Modification    pmod = *mod;
 
-       switch( mod->sm_op ) {
+       switch ( mod->sm_op ) {
        case LDAP_MOD_ADD:
                op = "add";
                break;
@@ -55,17 +55,14 @@ modify_add_values(
                assert( 0 );
        }
 
+       /* check if values to add exist in attribute */
        a = attr_find( e->e_attrs, mod->sm_desc );
+       if ( a != NULL ) {
+               int             rc, i, j, p;
+               MatchingRule    *mr;
 
-       /*
-        * With permissive set, as long as the attribute being added
-        * has the same value(s?) as the existing attribute, then the
-        * modify will succeed.
-        */
-
-       /* check if the values we're adding already exist */
-       if( mr == NULL || !mr->smr_match ) {
-               if ( a != NULL ) {
+               mr = mod->sm_desc->ad_type->sat_equality;
+               if( mr == NULL || !mr->smr_match ) {
                        /* do not allow add of additional attribute
                                if no equality rule exists */
                        *text = textbuf;
@@ -75,73 +72,85 @@ modify_add_values(
                        return LDAP_INAPPROPRIATE_MATCHING;
                }
 
-               for ( i = 0; mod->sm_values[i].bv_val != NULL; i++ ) {
-                       /* test asserted values against existing values */
-                       for( matched = 0, j = 0; a->a_vals[j].bv_val != NULL; j++ ) {
-                               if ( bvmatch( &mod->sm_values[i], &a->a_vals[j] ) ) {
-                                       if ( permissive ) {
-                                               matched++;
-                                               continue;
-                                       }
-                                       /* value exists already */
-                                       *text = textbuf;
-                                       snprintf( textbuf, textlen,
-                                               "modify/%s: %s: value #%i already exists",
-                                               op, mod->sm_desc->ad_cname.bv_val, j );
-                                       return LDAP_TYPE_OR_VALUE_EXISTS;
-                               }
-                       }
-
-                       if ( permissive && matched == j ) {
-                               /* values already exist; do nothing */
-                               return LDAP_SUCCESS;
+               if ( permissive ) {
+                       for ( i = 0; !BER_BVISNULL( &mod->sm_values[i] ); i++ ) /* count 'em */;
+                       pmod.sm_values = (BerVarray)ch_malloc( (i + 1)*sizeof( struct berval ) );
+                       if ( pmod.sm_nvalues != NULL ) {
+                               pmod.sm_nvalues = (BerVarray)ch_malloc(
+                                       (i + 1)*sizeof( struct berval ) );
                        }
                }
 
-       } else if ( a != NULL ) {
                /* no normalization is done in this routine nor
                 * in the matching routines called by this routine. 
                 * values are now normalized once on input to the
                 * server (whether from LDAP or from the underlying
                 * database).
                 */
-               int             rc;
-
-               for ( matched = 0, i = 0; a->a_vals[i].bv_val; i++ ) {
+               for ( p = i = 0; !BER_BVISNULL( &mod->sm_values[i] ); i++ ) {
                        int     match;
 
-                       if( mod->sm_nvalues ) {
-                               rc = value_match( &match, mod->sm_desc, mr,
-                                       SLAP_MR_EQUALITY | SLAP_MR_VALUE_OF_ASSERTION_SYNTAX
-                                               | SLAP_MR_ASSERTED_VALUE_NORMALIZED_MATCH
-                                               | SLAP_MR_ATTRIBUTE_VALUE_NORMALIZED_MATCH,
-                                       &a->a_nvals[i], &mod->sm_nvalues[0], text );
-                       } else {
-                               rc = value_match( &match, mod->sm_desc, mr,
-                                       SLAP_MR_EQUALITY | SLAP_MR_VALUE_OF_ATTRIBUTE_SYNTAX,
-                                       &a->a_vals[i], &mod->sm_values[0], text );
+                       assert( a->a_vals[0].bv_val );
+                       for ( j = 0; !BER_BVISNULL( &a->a_vals[j] ); j++ ) {
+                               if ( mod->sm_nvalues ) {
+                                       rc = value_match( &match, mod->sm_desc, mr,
+                                               SLAP_MR_EQUALITY | SLAP_MR_VALUE_OF_ASSERTION_SYNTAX
+                                                       | SLAP_MR_ASSERTED_VALUE_NORMALIZED_MATCH
+                                                       | SLAP_MR_ATTRIBUTE_VALUE_NORMALIZED_MATCH,
+                                               &a->a_nvals[j], &mod->sm_nvalues[i], text );
+                               } else {
+                                       rc = value_match( &match, mod->sm_desc, mr,
+                                               SLAP_MR_EQUALITY | SLAP_MR_VALUE_OF_ATTRIBUTE_SYNTAX,
+                                               &a->a_vals[j], &mod->sm_values[i], text );
+                               }
+
+                               if ( rc == LDAP_SUCCESS && match == 0 ) {
+                                       /* value already exists */
+                                       if ( permissive ) break;
+
+                                       *text = textbuf;
+                                       snprintf( textbuf, textlen,
+                                               "modify/%s: %s: value #%d already exists",
+                                               op, mod->sm_desc->ad_cname.bv_val, i );
+                                       return LDAP_TYPE_OR_VALUE_EXISTS;
+
+                               } else if ( rc != LDAP_SUCCESS ) {
+                                       return rc;
+                               }
                        }
 
-                       if( rc == LDAP_SUCCESS && match == 0 ) {
-                               if ( permissive ) {
-                                       matched++;
-                                       continue;
+                       if ( permissive && match != 0 ) {
+                               if ( pmod.sm_nvalues ) {
+                                       pmod.sm_nvalues[p] = mod->sm_nvalues[i];
                                }
-                               *text = textbuf;
-                               snprintf( textbuf, textlen,
-                                       "modify/%s: %s: value #0 already exists",
-                                       op, mod->sm_desc->ad_cname.bv_val );
-                               return LDAP_TYPE_OR_VALUE_EXISTS;
+                               pmod.sm_values[p++] = mod->sm_values[i];
                        }
                }
-               if ( permissive && matched == i ) {
-                       /* values already exist; do nothing */
-                       return LDAP_SUCCESS;
+
+               if ( permissive ) {
+                       if ( p == 0 ) {
+                               /* all new values match exist */
+                               ch_free( pmod.sm_values );
+                               if ( pmod.sm_nvalues ) ch_free( pmod.sm_nvalues );
+                               return LDAP_SUCCESS;
+                       }
+
+                       BER_BVZERO( &pmod.sm_values[p] );
+                       if ( pmod.sm_nvalues ) {
+                               BER_BVZERO( &pmod.sm_nvalues[p] );
+                       }
                }
        }
 
        /* no - add them */
-       if( attr_merge( e, mod->sm_desc, mod->sm_values, mod->sm_nvalues ) != 0 ) {
+       rc = attr_merge( e, mod->sm_desc, pmod.sm_values, pmod.sm_nvalues );
+
+       if ( a != NULL && permissive ) {
+               ch_free( pmod.sm_values );
+               if ( pmod.sm_nvalues ) ch_free( pmod.sm_nvalues );
+       }
+
+       if ( rc != 0 ) {
                /* this should return result of attr_merge */
                *text = textbuf;
                snprintf( textbuf, textlen,
@@ -165,7 +174,7 @@ modify_delete_values(
        Attribute       *a;
        MatchingRule    *mr = mod->sm_desc->ad_type->sat_equality;
        char            dummy = '\0';
-       int                     match = 0;
+       int             match = 0;
 
        /*
         * If permissive is set, then the non-existence of an 
@@ -210,9 +219,13 @@ modify_delete_values(
                return LDAP_NO_SUCH_ATTRIBUTE;
        }
 
-       for ( i = 0; mod->sm_values[i].bv_val != NULL; i++ ) {
+       for ( i = 0; !BER_BVISNULL( &mod->sm_values[i] ); i++ ) {
                int     found = 0;
-               for ( j = 0; a->a_vals[j].bv_val != NULL; j++ ) {
+               for ( j = 0; !BER_BVISNULL( &a->a_vals[j] ); j++ ) {
+                       /* skip already deleted values */
+                       if ( a->a_vals[j].bv_val == &dummy ) {
+                               continue;
+                       }
 
                        if( mod->sm_nvalues ) {
                                assert( a->a_nvals );
@@ -274,7 +287,7 @@ modify_delete_values(
        }
 
        /* compact array skipping dummies */
-       for ( k = 0, j = 0; a->a_vals[k].bv_val != NULL; k++ ) {
+       for ( k = 0, j = 0; !BER_BVISNULL( &a->a_vals[k] ); k++ ) {
                /* skip dummies */
                if( a->a_vals[k].bv_val == &dummy ) {
                        assert( a->a_nvals == NULL || a->a_nvals[k].bv_val == &dummy );
@@ -290,11 +303,13 @@ modify_delete_values(
                j++;
        }
 
-       a->a_vals[j].bv_val = NULL;
-       if (a->a_nvals != a->a_vals) a->a_nvals[j].bv_val = NULL;
+       BER_BVZERO( &a->a_vals[j] );
+       if (a->a_nvals != a->a_vals) {
+               BER_BVZERO( &a->a_nvals[j] );
+       }
 
        /* if no values remain, delete the entire attribute */
-       if ( a->a_vals[0].bv_val == NULL ) {
+       if ( BER_BVISNULL( &a->a_vals[0] ) ) {
                if ( attr_delete( &e->e_attrs, mod->sm_desc ) ) {
                        *text = textbuf;
                        snprintf( textbuf, textlen,
@@ -355,7 +370,7 @@ modify_increment_values(
                        return LDAP_SUCCESS;
                }
 
-               for( i=0; a->a_nvals[i].bv_val != NULL; i++ ) {
+               for( i = 0; !BER_BVISNULL( &a->a_nvals[i] ); i++ ) {
                        char *tmp;
                        long value = atol( a->a_nvals[i].bv_val );
                        size_t strln = snprintf( str, sizeof(str), "%ld", value+incr );