]> git.sur5r.net Git - openldap/commitdiff
Revert "ITS#6688 enforce search ACL in back-perl"
authorHoward Chu <hyc@openldap.org>
Thu, 9 Jun 2011 22:37:11 +0000 (15:37 -0700)
committerHoward Chu <hyc@openldap.org>
Thu, 9 Jun 2011 22:37:11 +0000 (15:37 -0700)
This reverts commit 53bb95a2e3456806b503415fb745eae1146c0627.
Code was working as designed/documented. Changing now will
probably break other users.

servers/slapd/back-perl/search.c

index e50fa0c128d71bf5cccf6f65e6e1dcd42a1cebfb..9d209ebd9831080ede33c35cb576f1e41191fa0f 100644 (file)
@@ -35,27 +35,6 @@ perl_back_search(
        int i;
 
        PERL_SET_CONTEXT( PERL_INTERPRETER );
-
-       {
-               Entry base = {0};
-               slap_mask_t mask;
-               /* Require search access to base */
-               base.e_name = op->o_req_dn;
-               base.e_nname = op->o_req_ndn;
-               if ( !access_allowed_mask( op, &base, slap_schema.si_ad_entry,
-                                       NULL, ACL_SEARCH, NULL, &mask ))
-               {
-                       if ( !ACL_GRANT( mask, ACL_DISCLOSE )) {
-                               rs->sr_err = LDAP_NO_SUCH_OBJECT;
-                       } else {
-                               rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
-                       }
-
-                       send_ldap_result( op, rs );
-                       return rs->sr_err;
-               }
-       }
-
        ldap_pvt_thread_mutex_lock( &perl_interpreter_mutex );  
 
        {