From 95780900edac514e060d5289b8b0e476aa517dbf Mon Sep 17 00:00:00 2001 From: Gaetan Boismal <gaetan.boismal@forgerock.com> Date: Fri, 20 Jun 2014 12:49:48 +0000 Subject: [PATCH] OPENDJ-1351 (CR-3814) Require a privilege needed for searching cn=changelog * config.ldiff ** Add the 'changelog-read' value to the 'ds-default-root-privilege-name' multi-valued attribute * GlobalConfiguration.xml RootDNConfiguration.xml ADSContext.java Privilege.java RootPrivilegeChangeListener.java ** Add the 'changelog-read' privilege where is was needed * GlobalCfgDefn.properties RootDNCfgDefn.properties ** Add 'changelog-read' privilege definition * replication.properties replication_fr.properties ** Add messages to prevent user that he needs to have the 'changelog-read' privilege if he wants to search on changelog * ECLSearchOperation.java ** Add a check to verify that the current connection has the 'changelog-read' privilege before starting the changelog search * ExternalChangeLogTest.java ** Unit test which ensure that is not possible to perform a changelog search without the 'changelog-read' privilege --- opends/src/messages/messages/replication.properties | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/opends/src/messages/messages/replication.properties b/opends/src/messages/messages/replication.properties index f7cf980..1b72f0d 100644 --- a/opends/src/messages/messages/replication.properties +++ b/opends/src/messages/messages/replication.properties @@ -620,4 +620,6 @@ will be removed from the replication topology. The change log file system may be read-only, \ full, or corrupt and must be fixed before this replication server can be used. The underlying error was: %s INFO_CHANGELOG_LOG_FILE_RECOVERED_284=Log file '%s' was successfully \ - recovered by removing a partially written record \ No newline at end of file + recovered by removing a partially written record +NOTICE_SEARCH_CHANGELOG_INSUFFICIENT_PRIVILEGES_285=You do not have sufficient privileges to \ + perform a search request on cn=changelog -- Gitblit v1.10.0