From f9a104bf4ddd1825f7b40f8691d185a72fe9bbc7 Mon Sep 17 00:00:00 2001 From: Pierangelo Masarati Date: Fri, 6 Jan 2006 16:24:07 +0000 Subject: [PATCH] allow backend_attribute to check access to "entry" and "children" pseudo-attributes --- servers/slapd/backend.c | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/servers/slapd/backend.c b/servers/slapd/backend.c index 85fb4bebc7..3256dd05f0 100644 --- a/servers/slapd/backend.c +++ b/servers/slapd/backend.c @@ -1457,6 +1457,19 @@ fe_acl_attribute( } if ( e ) { + if ( entry_at == slap_schema.si_ad_entry || entry_at == slap_schema.si_ad_children ) { + assert( vals == NULL ); + + rc = LDAP_SUCCESS; + if ( op->o_conn && access > ACL_NONE && + access_allowed( op, e, entry_at, NULL, + access, &acl_state ) == 0 ) + { + rc = LDAP_INSUFFICIENT_ACCESS; + } + goto freeit; + } + a = attr_find( e->e_attrs, entry_at ); if ( a == NULL ) { SlapReply rs = { 0 }; -- 2.39.5