From 39e0ea8a34ee4b61883acaa41b73fcf49da73d84 Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Wed, 01 Aug 2007 01:15:44 +0000
Subject: [PATCH] Add ACI support to control whether a  "smart referral" (named subordinate references -- RFC 3296) may be returned to a client. Smart referral entries contain the referral objectclass and have one or more "ref" attributes containing LDAP URLS. The ref attribute type has usage distributedOperation, so the operational shorthand '+' character can be used to match it:

---
 opends/src/server/org/opends/server/core/SearchOperationBasis.java |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/opends/src/server/org/opends/server/core/SearchOperationBasis.java b/opends/src/server/org/opends/server/core/SearchOperationBasis.java
index d95e942..69f0534 100644
--- a/opends/src/server/org/opends/server/core/SearchOperationBasis.java
+++ b/opends/src/server/org/opends/server/core/SearchOperationBasis.java
@@ -1040,7 +1040,7 @@
   /**
    * {@inheritDoc}
    */
-  public final boolean returnReference(SearchResultReference reference)
+  public final boolean returnReference(DN dn, SearchResultReference reference)
   {
     // See if the operation has been abandoned.  If so, then don't send the
     // reference and indicate that the search should end.
@@ -1073,7 +1073,7 @@
 
     // See if the client has permission to read this reference.
     if (AccessControlConfigManager.getInstance()
-        .getAccessControlHandler().maySend(this, reference) == false) {
+        .getAccessControlHandler().maySend(dn, this, reference) == false) {
       return true;
     }
 

--
Gitblit v1.10.0