From d428f48a4cf79de5e3f7cbc38a2c1af7a0b80e4f Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Sat, 21 Jul 2007 00:56:42 +0000
Subject: [PATCH] Add the new ACI keyword "targetcontrol" that can be used to enforce access based on the OID of a control. For example, a new global access control rule is also being added:
---
opends/src/server/org/opends/server/core/DefaultAccessControlHandler.java | 35 +++++++++++------------------------
1 files changed, 11 insertions(+), 24 deletions(-)
diff --git a/opends/src/server/org/opends/server/core/DefaultAccessControlHandler.java b/opends/src/server/org/opends/server/core/DefaultAccessControlHandler.java
index 46aec3a..1980fd6 100644
--- a/opends/src/server/org/opends/server/core/DefaultAccessControlHandler.java
+++ b/opends/src/server/org/opends/server/core/DefaultAccessControlHandler.java
@@ -100,7 +100,6 @@
}
-
/**
* {@inheritDoc}
*/
@@ -160,6 +159,17 @@
* {@inheritDoc}
*/
@Override
+ public boolean isAllowed(DN dn, Operation op, Control control)
+ {
+ return true;
+ }
+
+
+
+ /**
+ * {@inheritDoc}
+ */
+ @Override
public boolean isAllowed(LocalBackendModifyDNOperation modifyDNOperation)
{
return true;
@@ -189,7 +199,6 @@
}
-
/**
* {@inheritDoc}
*/
@@ -213,27 +222,5 @@
return true;
}
-
-
- /**
- * {@inheritDoc}
- */
- @Override
- public boolean isProxiedAuthAllowed(Operation operation, Entry entry)
- {
- return true;
- }
-
-
-
- /**
- * {@inheritDoc}
- */
- @Override
- public boolean isGetEffectiveRightsAllowed(SearchOperation operation,
- Control c)
- {
- return true;
- }
}
--
Gitblit v1.10.0