From ed39262fa647434d4a0e31f07754a263ce2b16e3 Mon Sep 17 00:00:00 2001
From: neil_a_wilson <neil_a_wilson@localhost>
Date: Fri, 09 Feb 2007 21:51:09 +0000
Subject: [PATCH] Add an initial set of privilege support to OpenDS.  The current privileges are currently defined and implemented: * config-read (allow reading the configuration) * config-write (allow updating the configuration) * ldif-import (allow invoking LDIF import tasks) * ldif-export (allow invoking LDIF export tasks) * backend-backup (allow invoking backup tasks) * backend-restore (allow invoking restore tasks) * server-shutdown (allow invoking server shutdown tasks) * server-restart (allow invoking server restart tasks) * server-restart (allow invoking server restart tasks) * password-reset (allow resetting user passwords) * update-schema (allow updating the server schema) * privilege-change (allow changing the set of privileges for a user)

---
 opends/src/server/org/opends/server/messages/ExtensionsMessages.java |   15 ++++++++++++++-
 1 files changed, 14 insertions(+), 1 deletions(-)

diff --git a/opends/src/server/org/opends/server/messages/ExtensionsMessages.java b/opends/src/server/org/opends/server/messages/ExtensionsMessages.java
index d8fb15c..66e04e5 100644
--- a/opends/src/server/org/opends/server/messages/ExtensionsMessages.java
+++ b/opends/src/server/org/opends/server/messages/ExtensionsMessages.java
@@ -4140,6 +4140,16 @@
 
 
   /**
+   * The message ID for the message that will be used if a password modify
+   * extended operation is requested to reset another user's password by a
+   * client without sufficient privileges.  This does not take any arguments.
+   */
+  public static final int MSGID_EXTOP_PASSMOD_INSUFFICIENT_PRIVILEGES =
+       CATEGORY_MASK_EXTENSIONS | SEVERITY_MASK_MILD_ERROR | 392;
+
+
+
+  /**
    * Associates a set of generic messages with the message IDs defined in this
    * class.
    */
@@ -4396,10 +4406,13 @@
     registerMessage(MSGID_EXTOP_PASSMOD_INVALID_OLD_PASSWORD,
                     "The password modify extended operation cannot be " +
                     "processed because the current password provided for the " +
-                    "use is invalid.");
+                    "user is invalid.");
     registerMessage(MSGID_EXTOP_PASSMOD_CANNOT_GET_PW_POLICY,
                     "An error occurred while attempting to get the " +
                     "password policy for user %s:  %s.");
+    registerMessage(MSGID_EXTOP_PASSMOD_INSUFFICIENT_PRIVILEGES,
+                    "You do not have sufficient privileges to perform " +
+                    "password reset operations.");
     registerMessage(MSGID_EXTOP_PASSMOD_ACCOUNT_DISABLED,
                     "The user account has been administratively disabled.");
     registerMessage(MSGID_EXTOP_PASSMOD_ACCOUNT_LOCKED,

--
Gitblit v1.10.0