From 3f02855a9202d146ec2e87a7568180caec938235 Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Wed, 25 Jul 2007 23:12:49 +0000
Subject: [PATCH] Add new ACI keyword "extop" that can be used to enforce access based on the OID of an extended operation. For example, a new global access extended operation rule is also being added:
---
opendj-sdk/opends/src/server/org/opends/server/messages/AciMessages.java | 17 +++++++++++++++++
1 files changed, 17 insertions(+), 0 deletions(-)
diff --git a/opendj-sdk/opends/src/server/org/opends/server/messages/AciMessages.java b/opendj-sdk/opends/src/server/org/opends/server/messages/AciMessages.java
index da777e4..71d0cc9 100644
--- a/opendj-sdk/opends/src/server/org/opends/server/messages/AciMessages.java
+++ b/opendj-sdk/opends/src/server/org/opends/server/messages/AciMessages.java
@@ -954,6 +954,16 @@
MSGID_ACI_SYNTAX_DECODE_EFFECTIVERIGHTS_FAIL =
CATEGORY_MASK_ACCESS_CONTROL | SEVERITY_MASK_SEVERE_WARNING | 94;
+ /**
+ * The message ID for the message that will be used if an "aci" attribute
+ * type value parse failed because an extop keyword expression
+ * did not parse. This takes one argument, which is the extop
+ * expression from the ACI.
+ */
+
+ public static final int MSGID_ACI_SYNTAX_INVALID_TARGEXTOP_EXPRESSION =
+ CATEGORY_MASK_ACCESS_CONTROL | SEVERITY_MASK_SEVERE_WARNING | 95;
+
/**
* Associates a set of generic messages with the message IDs defined in
* this class.
@@ -1501,5 +1511,12 @@
" geteffectiverights control could not be" +
" decoded because of the following reason: \"%s\"");
+ registerMessage(MSGID_ACI_SYNTAX_INVALID_TARGEXTOP_EXPRESSION,
+ "The provided Access Control Instruction (ACI) " +
+ "extop expression value \"%s\" is invalid. A valid " +
+ "extop keyword expression value requires one or more " +
+ "valid extended operation request OID strings in the following" +
+ " format: oid [|| oid1] ... [|| oidn]");
+
}
}
--
Gitblit v1.10.0