From 33d73b9cbebd2579377cc75e96f424c4ce2fb34a Mon Sep 17 00:00:00 2001
From: Chris Ridd <chris.ridd@forgerock.com>
Date: Wed, 31 Jul 2013 08:15:13 +0000
Subject: [PATCH] CR 2074 Fix OPENDJ-1097 Default access controls grant access to ds-sync-hist

---
 opends/src/server/org/opends/server/authorization/dseecompat/TargetAttr.java |    4 +---
 1 files changed, 1 insertions(+), 3 deletions(-)

diff --git a/opends/src/server/org/opends/server/authorization/dseecompat/TargetAttr.java b/opends/src/server/org/opends/server/authorization/dseecompat/TargetAttr.java
index 04debcb..18a0b48 100644
--- a/opends/src/server/org/opends/server/authorization/dseecompat/TargetAttr.java
+++ b/opends/src/server/org/opends/server/authorization/dseecompat/TargetAttr.java
@@ -23,7 +23,7 @@
  *
  *
  *      Copyright 2008 Sun Microsystems, Inc.
- *      Portions Copyright 2012 ForgeRock AS
+ *      Portions Copyright 2012-2013 ForgeRock AS
  */
 
 package org.opends.server.authorization.dseecompat;
@@ -276,7 +276,6 @@
                   targetAttr.opAttributes.contains(a))
             ret=true;
           if(targetAttr.isAllOpAttributes() ||
-             !targetAttr.attributes.isEmpty() ||
              !targetAttr.opAttributes.isEmpty()) {
             if(targetAttr.getOperator().
                     equals(EnumTargetOperator.NOT_EQUALITY))
@@ -287,7 +286,6 @@
                   targetAttr.attributes.contains(a))
             ret=true;
           if(targetAttr.isAllUserAttributes() ||
-                  !targetAttr.opAttributes.isEmpty() ||
                   !targetAttr.attributes.isEmpty()) {
             if(targetAttr.getOperator().
                     equals(EnumTargetOperator.NOT_EQUALITY))

--
Gitblit v1.10.0