From: Howard Chu <hyc@openldap.org>
Date: Thu, 9 Jun 2011 22:37:11 +0000 (-0700)
Subject: Revert "ITS#6688 enforce search ACL in back-perl"
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=68c7d375da2a163964c680d238ee272427fc8f11;p=openldap

Revert "ITS#6688 enforce search ACL in back-perl"

This reverts commit 53bb95a2e3456806b503415fb745eae1146c0627.
Code was working as designed/documented. Changing now will
probably break other users.
---

diff --git a/servers/slapd/back-perl/search.c b/servers/slapd/back-perl/search.c
index e50fa0c128..9d209ebd98 100644
--- a/servers/slapd/back-perl/search.c
+++ b/servers/slapd/back-perl/search.c
@@ -35,27 +35,6 @@ perl_back_search(
 	int i;
 
 	PERL_SET_CONTEXT( PERL_INTERPRETER );
-
-	{
-		Entry base = {0};
-		slap_mask_t mask;
-		/* Require search access to base */
-		base.e_name = op->o_req_dn;
-		base.e_nname = op->o_req_ndn;
-		if ( !access_allowed_mask( op, &base, slap_schema.si_ad_entry,
-					NULL, ACL_SEARCH, NULL, &mask ))
-		{
-			if ( !ACL_GRANT( mask, ACL_DISCLOSE )) {
-				rs->sr_err = LDAP_NO_SUCH_OBJECT;
-			} else {
-				rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
-			}
-
-			send_ldap_result( op, rs );
-			return rs->sr_err;
-		}
-	}
-
 	ldap_pvt_thread_mutex_lock( &perl_interpreter_mutex );	
 
 	{