From 745d3ccec1c5673231f872a7bc8d9ff6fa655279 Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Wed, 25 Jul 2007 23:12:49 +0000
Subject: [PATCH] Add new ACI keyword "extop" that can be used to enforce access based on the OID of an extended operation. For example, a new global access extended operation rule is also being added:

---
 opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java |   21 +++++++++++++++------
 1 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java b/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java
index d0a5f1c..420be0f 100644
--- a/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java
+++ b/opends/src/server/org/opends/server/authorization/dseecompat/AciTargetMatchContext.java
@@ -118,12 +118,21 @@
      */
     public int getRights();
 
-  /**
-   * Return the oid string of the control being evaluated.
-   *
-   * @return The oid string of the control being evaluated.
-   */
-    public String getControlOID();
+    /**
+     * Return the OID (Object Identifier) string of the control being evaluated.
+     *
+     * @return The OID string of the control being evaluated.
+     */
+      public String getControlOID();
+
+
+   /**
+    * Return The OID (Object Identifier) string of the extended operation being
+    *        evaluated.
+    *
+    * @return The OID string of the extended operation being evaluated.
+    */
+    public String getExtOpOID();
 
     /**
      * Checks if the container's rights has the specified rights.

--
Gitblit v1.10.0