From: Kurt Zeilenga <kurt@openldap.org>
Date: Fri, 1 Jun 2001 20:09:03 +0000 (+0000)
Subject: Default ACL clause should be "by * none stop" not "by * stop".
X-Git-Tag: LDBM_PRE_GIANT_RWLOCK~1366
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=9a0b6e92d732adc0ae7a9890318e9c1e09fa4767;p=openldap

Default ACL clause should be "by * none stop" not "by * stop".
That is, default rule should set permissions to none.
---

diff --git a/servers/slapd/acl.c b/servers/slapd/acl.c
index e256972fee..68353e909a 100644
--- a/servers/slapd/acl.c
+++ b/servers/slapd/acl.c
@@ -970,8 +970,11 @@ acl_mask(
 		}
 	}
 
+	/* implicit "by * none" clause */
+	ACL_INIT(*mask);
+
 #ifdef NEW_LOGGING
-	LDAP_LOG(( "aci", LDAP_LEVEL_RESULTS,
+	LDAP_LOG(( "acl", LDAP_LEVEL_RESULTS,
 		   "acl_mask: conn %d  no more <who> clauses, returning %d (stop)\n",
 		   conn->c_connid, accessmask2str( *mask, accessmaskbuf) ));
 #else