CR 2074 Fix OPENDJ-1097 Default access controls grant access to ds-sync-hist

Chris Ridd

31.15.2013 33d73b9cbebd2579377cc75e96f424c4ce2fb34a

CR 2074 Fix OPENDJ-1097 Default access controls grant access to ds-sync-hist

 opends/src/server/org/opends/server/authorization/dseecompat/TargetAttr.java

@@ -23,7 +23,7 @@
 *
 *
 *      Copyright 2008 Sun Microsystems, Inc.
 *      Portions Copyright 2012 ForgeRock AS
 *      Portions Copyright 2012-2013 ForgeRock AS
 */

package org.opends.server.authorization.dseecompat;
@@ -276,7 +276,6 @@
                  targetAttr.opAttributes.contains(a))
            ret=true;
          if(targetAttr.isAllOpAttributes() ||
             !targetAttr.attributes.isEmpty() ||
             !targetAttr.opAttributes.isEmpty()) {
            if(targetAttr.getOperator().
                    equals(EnumTargetOperator.NOT_EQUALITY))
@@ -287,7 +286,6 @@
                  targetAttr.attributes.contains(a))
            ret=true;
          if(targetAttr.isAllUserAttributes() ||
                  !targetAttr.opAttributes.isEmpty() ||
                  !targetAttr.attributes.isEmpty()) {
            if(targetAttr.getOperator().
                    equals(EnumTargetOperator.NOT_EQUALITY))

 opends/tests/unit-tests-testng/src/server/org/opends/server/authorization/dseecompat/TargetAttrTestCase.java

@@ -400,8 +400,8 @@
        { "!=", "cn || sn", "sn", false },
        { "!=", "cn", "sn", true }, // Not eq user attr
        { "!=", "cn || sn", "description", true }, // Not eq user attr
        { "!=", "cn || sn", "modifytimestamp", true }, // Not eq op attr
        { "!=", "aci", "cn", true },
        { "!=", "cn || sn", "modifytimestamp", false }, // Not eq op attr
        { "!=", "aci", "cn", false },
        { "!=", "aci", "modifytimestamp", true },
    };
  }