From 5f9f5b2debd493771c75412e02853ab77560c941 Mon Sep 17 00:00:00 2001
From: dugan <dugan@localhost>
Date: Mon, 12 Oct 2009 15:13:17 +0000
Subject: [PATCH] Deny acis not evaluate correctly when there are no allow acis. Issue 4278.

---
 opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java b/opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java
index c88ec16..c41b659 100644
--- a/opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java
+++ b/opends/src/server/org/opends/server/authorization/dseecompat/AciHandler.java
@@ -1438,6 +1438,7 @@
     {
       evalCtx.setEvalReason(EnumEvalReason.NO_ALLOW_ACIS);
       evalCtx.setDecidingAci(null);
+      evalCtx.setDenyEval(true);
       return false;
     }
     evalCtx.setDenyEval(true);

--
Gitblit v1.10.0