From 2d0aba220afc66dcb50fcd2639df306a25f639ea Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Wed, 02 May 2007 02:02:04 +0000
Subject: [PATCH] Add ACI support for Get Effective Rights control. Issue #87.
---
opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java | 22 ++++++++++++++++++++++
1 files changed, 22 insertions(+), 0 deletions(-)
diff --git a/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java b/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java
index 7fdb608..3ccb74b 100644
--- a/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java
+++ b/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java
@@ -143,6 +143,28 @@
* @return True if the ACI had a targattrfilter rule that matched.
*/
public boolean getTargAttrFiltersMatch();
+
+ /**
+ * Add the specified ACI to a list of ACIs that have a targattrfilters rule
+ * that matched. This is used by geteffectiverights to determine the rights
+ * of an attribute that possibly might evaluate to true.
+ * @param aci The ACI to save.
+ */
+ public void addTargAttrFiltersMatchAci(Aci aci);
+
+ /**
+ * Save the name of the last ACI that matched a targattrfilters rule. This
+ * is used by geteffectiverights evaluation.
+ * @param name The ACI's name to save.
+ */
+ void setTargAttrFiltersAciName(String name);
+
+ /**
+ * Returns true of a match context is performing a geteffectiverights
+ * evaluation.
+ * @return True if a match context is evaluating geteffectiverights.
+ */
+ boolean isGetEffectiveRightsEval();
}
--
Gitblit v1.10.0