From 571884cec31d00f0c1b9de186fb1bbac17d289d5 Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Wed, 01 Aug 2007 01:15:44 +0000
Subject: [PATCH] Add ACI support to control whether a "smart referral" (named subordinate references -- RFC 3296) may be returned to a client. Smart referral entries contain the referral objectclass and have one or more "ref" attributes containing LDAP URLS. The ref attribute type has usage distributedOperation, so the operational shorthand '+' character can be used to match it:
---
opendj-sdk/opends/src/server/org/opends/server/api/AccessControlHandler.java | 10 +++++++---
1 files changed, 7 insertions(+), 3 deletions(-)
diff --git a/opendj-sdk/opends/src/server/org/opends/server/api/AccessControlHandler.java b/opendj-sdk/opends/src/server/org/opends/server/api/AccessControlHandler.java
index 12200ab..a15238b 100644
--- a/opendj-sdk/opends/src/server/org/opends/server/api/AccessControlHandler.java
+++ b/opendj-sdk/opends/src/server/org/opends/server/api/AccessControlHandler.java
@@ -308,7 +308,10 @@
/**
* Indicates whether the provided search result reference may be
- * sent to the client.
+ * sent to the client based on the access control configuration.
+ *
+ * @param dn A DN that can be used in the access
+ * determination.
*
* @param searchOperation The search operation with which the
* provided reference is associated.
@@ -319,8 +322,9 @@
* the reference to be returned to the client, or
* {@code false} if not.
*/
- public abstract boolean maySend(SearchOperation searchOperation,
- SearchResultReference searchReference);
+ public abstract boolean maySend(DN dn,
+ SearchOperation searchOperation,
+ SearchResultReference searchReference);
}
--
Gitblit v1.10.0