Reverted r9306 because it introduced a regression and because it is not cle...

Jean-Noel Rouvignac

30.47.2013 be93a5b15bb2eb63b7afe94ec45113a06ec591c7

Reverted r9306 because it introduced a regression and because it is not clear how the DSEE ACI model should grant/deny access in this case.

A new bug will be created for this case.

 opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java

@@ -355,11 +355,6 @@
  {
    AciContainer container =
        new AciLDAPOperationContainer(operation, ACI_COMPARE);
    if (!isAllowed(container, operation))
    {
      // first check more global ACIs without targetattrs defined on them
      return false;
    }

    String baseName;
    String rawAttributeType = operation.getRawAttributeType();
@@ -380,7 +375,6 @@
            .getAssertionValue());
    container.setCurrentAttributeType(attributeType);
    container.setCurrentAttributeValue(attributeValue);
    // then check more precise ACIs with targetattrs defined on them
    return isAllowed(container, operation);
  }