From 098b388d892483931415de86a77de01901dc8141 Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Tue, 13 Oct 2009 00:34:20 +0000
Subject: [PATCH] Unit test for issue 4278.
---
opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java | 3 +--
1 files changed, 1 insertions(+), 2 deletions(-)
diff --git a/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java b/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java
index c41b659..b3a0e96 100644
--- a/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java
+++ b/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java
@@ -1431,6 +1431,7 @@
LinkedList<Aci> allows = evalCtx.getAllowList();
// If allows list is empty and not doing geteffectiverights return
// false.
+ evalCtx.setDenyEval(true);
if (allows.isEmpty()
&& !(evalCtx.isGetEffectiveRightsEval()
&& !evalCtx.hasRights(ACI_SELF) && evalCtx
@@ -1438,10 +1439,8 @@
{
evalCtx.setEvalReason(EnumEvalReason.NO_ALLOW_ACIS);
evalCtx.setDecidingAci(null);
- evalCtx.setDenyEval(true);
return false;
}
- evalCtx.setDenyEval(true);
for (Aci denyAci : denys)
{
res = Aci.evaluate(evalCtx, denyAci);
--
Gitblit v1.10.0