From: Kurt Zeilenga <kurt@openldap.org>
Date: Thu, 20 Jul 2000 22:52:44 +0000 (+0000)
Subject: Fix entry/children always allowed bug!
X-Git-Tag: LDBM_PRE_GIANT_RWLOCK~2402
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=2890bc5b6dd67115c67c4a38867671285ee7bbe9;p=openldap

Fix entry/children always allowed bug!
---

diff --git a/servers/slapd/acl.c b/servers/slapd/acl.c
index b61b1570c1..cbed19b931 100644
--- a/servers/slapd/acl.c
+++ b/servers/slapd/acl.c
@@ -115,7 +115,9 @@ access_allowed(
 	 * by ACL_WRITE checking as any found here are not provided
 	 * by the user
 	 */
-	if ( access >= ACL_WRITE && is_at_no_user_mod( desc->ad_type ) )
+	if ( access >= ACL_WRITE && is_at_no_user_mod( desc->ad_type )
+		&& desc != slap_schema.si_ad_entry
+		&& desc != slap_schema.si_ad_children )
 	{
  		Debug( LDAP_DEBUG_ACL, "NoUserMod Operational attribute:"
 			" %s access granted\n",