Bypass race condition in ACI group membership check code. (Issue TBD).

dugan

28.32.2008 faceccd8205fda6d4d5510bdebf6e38f9b221fd2

 opends/src/server/org/opends/server/authorization/dseecompat/AciContainer.java

@@ -830,17 +830,22 @@
      return matched;
    }

  /**
   * {@inheritDoc}
   */
    /**
     * {@inheritDoc}
     */
    public boolean isMemberOf(Group group) {
        boolean ret;
        try {
      boolean ret;
      try {
        Entry e = getClientEntry();
        if(e != null) {
          ret=group.isMember(e);
        } else {
          ret=group.isMember(getClientDN());
        } catch (DirectoryException ex) {
            ret=false;
        }
        return  ret;
      } catch (DirectoryException ex) {
        ret=false;
      }
      return  ret;
    }

  /**