From 8fefc54e215e3f0c1520c6890bfb9908c13a9036 Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Thu, 31 May 2007 16:59:31 +0000
Subject: [PATCH] Fix erroneous delete and proxy effective rights results. Issue 1620.
---
opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargets.java | 4 +++-
1 files changed, 3 insertions(+), 1 deletions(-)
diff --git a/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargets.java b/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargets.java
index d7d212d..dc13132 100644
--- a/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargets.java
+++ b/opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/AciTargets.java
@@ -452,7 +452,9 @@
* skiprights rights mask.
*/
public static boolean skipRightsHasRights(int rights) {
- return ((skipRights & rights) == rights);
+ //geteffectiverights sets this flag, turn it off before evaluating.
+ int tmpRights=rights & ~ACI_SKIP_PROXY_CHECK;
+ return ((skipRights & tmpRights) == tmpRights);
}
--
Gitblit v1.10.0