From 8885f00ac6cdbfdb965379b8c29531cb85ec0604 Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Mon, 04 Feb 2008 15:25:56 +0000
Subject: [PATCH] Allow privilege check for unauthenticated clients. Issue 2894.
---
opendj-sdk/opends/src/server/org/opends/server/api/ClientConnection.java | 5 +++--
1 files changed, 3 insertions(+), 2 deletions(-)
diff --git a/opendj-sdk/opends/src/server/org/opends/server/api/ClientConnection.java b/opendj-sdk/opends/src/server/org/opends/server/api/ClientConnection.java
index 64500af..d6d38dc 100644
--- a/opendj-sdk/opends/src/server/org/opends/server/api/ClientConnection.java
+++ b/opendj-sdk/opends/src/server/org/opends/server/api/ClientConnection.java
@@ -1020,8 +1020,9 @@
else
{
if (operation.getAuthorizationDN().equals(
- authenticationInfo.getAuthorizationDN()))
- {
+ authenticationInfo.getAuthorizationDN()) ||
+ (operation.getAuthorizationDN().equals(DN.NULL_DN) &&
+ !authenticationInfo.isAuthenticated())) {
result = privileges.contains(privilege) ||
DirectoryServer.isDisabled(privilege);
if (debugEnabled())
--
Gitblit v1.10.0