A global ACI allow querying data. Added the following to restrict anonymous...

Jean-Noel Rouvignac

26.24.2013 36b59d045aa7ef553d0704a637d00e46e4050254

 opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java

@@ -355,6 +355,11 @@
  {
    AciContainer container =
        new AciLDAPOperationContainer(operation, ACI_COMPARE);
    if (!isAllowed(container, operation))
    {
      // first check more global ACIs without targetattrs defined on them
      return false;
    }

    String baseName;
    String rawAttributeType = operation.getRawAttributeType();
@@ -375,6 +380,7 @@
            .getAssertionValue());
    container.setCurrentAttributeType(attributeType);
    container.setCurrentAttributeValue(attributeValue);
    // then check more precise ACIs with targetattrs defined on them
    return isAllowed(container, operation);
  }