fix for issue #1217 Privilege checks are done in the JmxClientConnection co...

lutoff

12.18.2007 c1405673acad68e2233b152fec84409b0af36994

 opends/src/server/org/opends/server/protocols/jmx/RmiAuthenticator.java

@@ -39,12 +39,17 @@
import org.opends.server.protocols.asn1.ASN1OctetString;
import org.opends.server.protocols.ldap.LDAPResultCode;
import org.opends.server.types.Control;
import org.opends.server.types.DisconnectReason;
import org.opends.server.types.Privilege;
import org.opends.server.types.ResultCode;
import org.opends.server.types.DN;
import org.opends.server.types.AuthenticationInfo;
import org.opends.server.types.LDAPException;

import static org.opends.server.loggers.debug.DebugLogger.*;
import static org.opends.server.messages.MessageHandler.getMessage;
import static org.opends.server.messages.ProtocolMessages.*;

import org.opends.server.loggers.debug.DebugTracer;
import org.opends.server.types.DebugLogLevel;

@@ -183,7 +188,7 @@
      {
        TRACER.debugCaught(DebugLogLevel.ERROR, e);
      }
      SecurityException se = new SecurityException();
      SecurityException se = new SecurityException(e.getMessage());
      se.initCause(e);
      throw se;
    }
@@ -277,6 +282,19 @@

      authInfo = bindOp.getAuthenticationInfo();
      jmxClientConnection.setAuthenticationInfo(authInfo);

      // Check JMX_READ privilege.
      if (! jmxClientConnection.hasPrivilege(Privilege.JMX_READ, null))
      {
        int msgID = MSGID_JMX_INSUFFICIENT_PRIVILEGES;
        String message = getMessage(msgID);

        jmxClientConnection.disconnect(DisconnectReason.CONNECTION_REJECTED,
            false, msgID);

        SecurityException se = new SecurityException(message);
        throw se;
      }
      return jmxClientConnection;
    }
    else