From df0a434d42e18e7cef08c9fa804bb0927a3b6a79 Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Mon, 21 May 2007 22:47:07 +0000
Subject: [PATCH] Correct problem QA found with fix for issue 1606, where the attribute(s) still were not being returned when they should be. Also, corrected problem where userattr bind rule was using filtered resource entry for userattr bind rule evaluation, causing the bind rule to sometimes not be evaluated correctly if the attribute isn't present during a userattr attribute value expression.

---
 opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java |    8 +++++---
 1 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java b/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java
index f70e3bb..d6fb958 100644
--- a/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java
+++ b/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java
@@ -176,7 +176,7 @@
    * can be skipped, is when a single ACI matched using a targetattr
    * all attributes rule.
    *
-   * @param v  The flag to set the mask to.
+   * @param v  The mask to this value.
    */
   void setACIEvalAttributesRule(int v);
 
@@ -193,9 +193,11 @@
 
   /**
    * Used to clear the mask used to detect if access checking needs to be
-   * performed on individual non-operational attributes types.
+   * performed on individual non-operational attributes types. The specified
+   * value is cleared from the mask or if the value equals 0 the mask is
+   * completely cleared.
    *
-   * @param v  The flag to clear (always ACI_ATTR_STAR_MATCHED)
+   * @param v  The flag to clear or 0 to set the mask to 0.
    */
     public void clearACIEvalAttributesRule(int v);
 }

--
Gitblit v1.10.0