|
 |
b161c9 |
From b9771a9a3202b4d3a8562ed7359c824f8922b4fe Mon Sep 17 00:00:00 2001
|
|
|
b161c9 |
From: Noriko Hosoi <nhosoi@redhat.com>
|
|
|
b161c9 |
Date: Wed, 15 Oct 2014 16:20:51 -0700
|
|
|
b161c9 |
Subject: [PATCH 76/84] Ticket #47553 - Enhance ACIs to have more control over
|
|
|
b161c9 |
MODRDN operations
|
|
|
b161c9 |
|
|
|
b161c9 |
Description: Macro SLAPI_ACL_ALL does not contain SLAPI_ACL_MODDN.
|
|
|
b161c9 |
Thus, even though all operations are allowed by "allow (all)", just
|
|
|
b161c9 |
modrdn fails with "Insufficient access (50)".
|
|
|
b161c9 |
|
|
|
b161c9 |
https://fedorahosted.org/389/ticket/47553
|
|
|
b161c9 |
|
|
|
b161c9 |
Reviewed by tbordaz@redhat.com (Thank you, Thierry!!)
|
|
|
b161c9 |
|
|
|
b161c9 |
(cherry picked from commit 4aafe7444d983c08b16a84b7c23c8d303de45dc6)
|
|
|
b161c9 |
---
|
|
|
b161c9 |
ldap/servers/slapd/slapi-plugin.h | 2 +-
|
|
|
b161c9 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
b161c9 |
|
|
|
b161c9 |
diff --git a/ldap/servers/slapd/slapi-plugin.h b/ldap/servers/slapd/slapi-plugin.h
|
|
|
b161c9 |
index dfe75eb..5a7af5e 100644
|
|
|
b161c9 |
--- a/ldap/servers/slapd/slapi-plugin.h
|
|
|
b161c9 |
+++ b/ldap/servers/slapd/slapi-plugin.h
|
|
|
b161c9 |
@@ -237,12 +237,12 @@ NSPR_API(PRUint32) PR_fprintf(struct PRFileDesc* fd, const char *fmt, ...)
|
|
|
b161c9 |
#define SLAPI_ACL_ADD 0x20
|
|
|
b161c9 |
#define SLAPI_ACL_SELF 0x40
|
|
|
b161c9 |
#define SLAPI_ACL_PROXY 0x80
|
|
|
b161c9 |
-#define SLAPI_ACL_ALL 0x7f
|
|
|
b161c9 |
/* Values 0x200 and 0x400 are booked (acl.h) by
|
|
|
b161c9 |
* ACLPB_SLAPI_ACL_WRITE_ADD
|
|
|
b161c9 |
* ACLPB_SLAPI_ACL_WRITE_DEL
|
|
|
b161c9 |
*/
|
|
|
b161c9 |
#define SLAPI_ACL_MODDN 0x0800
|
|
|
b161c9 |
+#define SLAPI_ACL_ALL 0x087f
|
|
|
b161c9 |
|
|
|
b161c9 |
|
|
|
b161c9 |
/*
|
|
|
b161c9 |
--
|
|
|
b161c9 |
1.9.3
|
|
|
b161c9 |
|