From 4dbdba7dcc4bdd833a0d8ccf08a7827bdd2dc96c Mon Sep 17 00:00:00 2001 From: Gaetan Boismal <gaetan.boismal@forgerock.com> Date: Mon, 23 Jun 2014 12:49:04 +0000 Subject: [PATCH] OPENDJ-1351 (CR-3814) Require a privilege needed for searching cn=changelog * config.ldiff ** Add the 'changelog-read' value to the 'ds-default-root-privilege-name' multi-valued attribute * GlobalConfiguration.xml RootDNConfiguration.xml ADSContext.java Privilege.java RootPrivilegeChangeListener.java ** Add the 'changelog-read' privilege where is was needed * GlobalCfgDefn.properties RootDNCfgDefn.properties ** Add 'changelog-read' privilege definition * replication.properties replication_fr.properties ** Add messages to prevent user that he needs to have the 'changelog-read' privilege if he wants to search on changelog * ECLSearchOperation.java ** Add a check to verify that the current connection has the 'changelog-read' privilege before starting the changelog search * ExternalChangeLogTest.java ** Unit test which ensure that is not possible to perform a changelog search without the 'changelog-read' privilege --- opendj3-server-dev/src/messages/messages/replication.properties | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/opendj3-server-dev/src/messages/messages/replication.properties b/opendj3-server-dev/src/messages/messages/replication.properties index 377d2c5..ff8836a 100644 --- a/opendj3-server-dev/src/messages/messages/replication.properties +++ b/opendj3-server-dev/src/messages/messages/replication.properties @@ -531,3 +531,5 @@ change %s to replicaDB %s %s because: %s ERR_COULD_NOT_ADD_CHANGE_TO_SHUTTING_DOWN_REPLICA_DB_240=Could not add \ change %s to replicaDB %s %s because flushing thread is shutting down +NOTE_SEARCH_CHANGELOG_INSUFFICIENT_PRIVILEGES_285=You do not have sufficient privileges to \ + perform a search request on cn=changelog \ No newline at end of file -- Gitblit v1.10.0