[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: commit: ldap/servers/slapd backend.c compare.c
- To: lukeh@OpenLDAP.org
- Subject: Re: commit: ldap/servers/slapd backend.c compare.c
- From: "Pierangelo Masarati" <ando@sys-net.it>
- Date: Thu, 27 Jan 2005 11:05:22 +0100 (CET)
- Cc: "OpenLDAP Commit" <openldap-commit2devel@OpenLDAP.org>
- Domainkey-signature: a=rsa-sha1; s=mail; d=sys-net.it; c=simple; q=dns; b=dLZF171Ow0eYxa0MWt5PszGgcwTWoaC2+T7QRia6J0jESWn+knI+5JCOF4sxguUhS qRcZAysK09bT5fsh9HIPQ==
- Importance: Normal
- In-reply-to: <200501262219.j0QMJnlr051722@cantor.openldap.org>
- References: <200501262219.j0QMJnlr051722@cantor.openldap.org>
- User-agent: SquirrelMail/1.4.3a-1
> Update of /repo/OpenLDAP/pkg/ldap/servers/slapd
>
> Modified Files:
> backend.c 1.305 -> 1.306
> compare.c 1.126 -> 1.127
>
> Log Message:
> move compare to frontend (disabled by default, only invoked if backend
> doesn't provide hook); honor ITS#3472 (disclose access check); fix
> ITS#3521 as well (check access to hasSubordinates); fix a problem in
> backend_attribute() with operational attrs; add backend_access() helper
Luke,
I wonder if you could check the SLAPI portion of this commit; you should
simply review the code in backend.c for backend_access(), checking for
trivial errors; see function backend_compute_output_attr_access() for
details. There's no way in current code to exploit that feature, because
backend_access() is only called to check access to the "entry"
pseudo-attribute, but there might be need in future development.
Cheers, p.
--
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it
SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497