From b9771a9a3202b4d3a8562ed7359c824f8922b4fe Mon Sep 17 00:00:00 2001 From: Noriko Hosoi Date: Wed, 15 Oct 2014 16:20:51 -0700 Subject: [PATCH 76/84] Ticket #47553 - Enhance ACIs to have more control over MODRDN operations Description: Macro SLAPI_ACL_ALL does not contain SLAPI_ACL_MODDN. Thus, even though all operations are allowed by "allow (all)", just modrdn fails with "Insufficient access (50)". https://fedorahosted.org/389/ticket/47553 Reviewed by tbordaz@redhat.com (Thank you, Thierry!!) (cherry picked from commit 4aafe7444d983c08b16a84b7c23c8d303de45dc6) --- ldap/servers/slapd/slapi-plugin.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ldap/servers/slapd/slapi-plugin.h b/ldap/servers/slapd/slapi-plugin.h index dfe75eb..5a7af5e 100644 --- a/ldap/servers/slapd/slapi-plugin.h +++ b/ldap/servers/slapd/slapi-plugin.h @@ -237,12 +237,12 @@ NSPR_API(PRUint32) PR_fprintf(struct PRFileDesc* fd, const char *fmt, ...) #define SLAPI_ACL_ADD 0x20 #define SLAPI_ACL_SELF 0x40 #define SLAPI_ACL_PROXY 0x80 -#define SLAPI_ACL_ALL 0x7f /* Values 0x200 and 0x400 are booked (acl.h) by * ACLPB_SLAPI_ACL_WRITE_ADD * ACLPB_SLAPI_ACL_WRITE_DEL */ #define SLAPI_ACL_MODDN 0x0800 +#define SLAPI_ACL_ALL 0x087f /* -- 1.9.3