From 2dc005ee50bb835a3c6130d3c1b757cf6ad63061 Mon Sep 17 00:00:00 2001
From: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Date: Fri, 27 Mar 2026 10:28:55 +0000
Subject: [PATCH] Fix referential integrity plugin silently bypassing check-references for modify operations
---
opendj-server-legacy/src/main/java/org/opends/server/plugins/ReferentialIntegrityPlugin.java | 11 +++++------
1 files changed, 5 insertions(+), 6 deletions(-)
diff --git a/opendj-server-legacy/src/main/java/org/opends/server/plugins/ReferentialIntegrityPlugin.java b/opendj-server-legacy/src/main/java/org/opends/server/plugins/ReferentialIntegrityPlugin.java
index c5b74a0..a1995b6 100644
--- a/opendj-server-legacy/src/main/java/org/opends/server/plugins/ReferentialIntegrityPlugin.java
+++ b/opendj-server-legacy/src/main/java/org/opends/server/plugins/ReferentialIntegrityPlugin.java
@@ -991,10 +991,9 @@
}
final List<Modification> mods = modifyOperation.getModifications();
- final Entry entry = modifyOperation.getModifiedEntry();
/* Make sure the entry belongs to one of the configured naming contexts. */
- DN entryDN = entry.getName();
+ DN entryDN = modifyOperation.getEntryDN();
DN entryBaseDN = getEntryBaseDN(entryDN);
if (entryBaseDN == null)
{
@@ -1009,14 +1008,14 @@
if (modType != ModificationType.ADD
&& modType != ModificationType.REPLACE)
{
- break;
+ continue;
}
- Attribute modifiedAttribute = entry.getAttribute(mod.getAttribute().getAttributeDescription());
- if (modifiedAttribute != null)
+ Attribute modifiedAttribute = mod.getAttribute();
+ if (modifiedAttribute != null && !modifiedAttribute.isEmpty())
{
PluginResult.PreOperation result =
- isIntegrityMaintained(modifiedAttribute, entryDN, entryBaseDN);
+ isIntegrityMaintained(modifiedAttribute, entryDN, entryBaseDN);
if (result.getResultCode() != ResultCode.SUCCESS)
{
return result;
--
Gitblit v1.10.0