upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-26 01:29:59 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Tentative fix for last comment (tests still running)

Browse source
This commit is contained in:
Kurt Zeilenga 2003-10-12 07:19:27 +00:00
parent 976f61f0ed
commit 535c221599
2 changed files with 9 additions and 68 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

38
servers/slapd/back-bdb/add.c
View file

@ -135,8 +135,6 @@ retry: /* transaction retry */
/*
* Get the parent dn and see if the corresponding entry exists.
* If the parent does not exist, only allow the "root" user to
* add the entry.
*/
if ( be_issuffix( op->o_bd, &op->oq_add.rs_e->e_nname ) ) {
pdn = slap_empty_bv;
@ -285,40 +283,12 @@ retry: /* transaction retry */
} else {
/*
* no parent!
* must be adding entry at suffix or with parent ""
* if not attempting to add entry at suffix or with parent ""
*/
if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv )
|| be_isupdate( op->o_bd, &op->o_ndn ) )
if (( !be_isroot( op->o_bd, &op->o_ndn )
|| !dn_match( &pdn, &slap_empty_bv ))
&& !is_entry_glue( op->oq_add.rs_e ))
{
p = (Entry *)&slap_entry_root;
/* check parent for "children" acl */
rs->sr_err = access_allowed( op, p,
children, NULL, ACL_WRITE, NULL );
p = NULL;
if ( ! rs->sr_err ) {
switch( opinfo.boi_err ) {
case DB_LOCK_DEADLOCK:
case DB_LOCK_NOTGRANTED:
goto retry;
}
#ifdef NEW_LOGGING
LDAP_LOG ( OPERATION, DETAIL1,
"bdb_add: no write access to parent\n", 0, 0, 0 );
#else
Debug( LDAP_DEBUG_TRACE,
"bdb_add: no write access to parent\n",
0, 0, 0 );
#endif
rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
rs->sr_text = "no write access to parent";
goto return_results;
}
} else if ( !is_entry_glue( op->oq_add.rs_e )) {
#ifdef NEW_LOGGING
LDAP_LOG ( OPERATION, DETAIL1, "bdb_add: %s denied\n",
pdn.bv_len == 0 ? "suffix" : "entry at root", 0, 0 );

39
servers/slapd/back-ldbm/add.c
View file

@ -99,8 +99,7 @@ ldbm_back_add(
dnParent( &op->o_req_ndn, &pdn );
}
if( pdn.bv_len )
{
if( pdn.bv_len ) {
Entry *matched = NULL;
/* get parent with writer lock */
@ -191,7 +190,6 @@ ldbm_back_add(
0, 0 );
#endif
send_ldap_error( op, rs, LDAP_ALIAS_PROBLEM,
"parent is an alias" );
@ -234,39 +232,12 @@ ldbm_back_add(
#endif
} else {
if( pdn.bv_val != NULL ) {
assert( *pdn.bv_val == '\0' );
}
assert( pdn.bv_val == NULL || *pdn.bv_val != '\0' );
/* no parent */
if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv ) ||
be_isupdate( op->o_bd, &op->o_ndn ) )
if (( !be_isroot( op->o_bd, &op->o_ndn )
|| !dn_match( &pdn, &slap_empty_bv ))
&& !is_entry_glue( op->oq_add.rs_e ))
{
p = (Entry *)&slap_entry_root;
rs->sr_err = access_allowed( op, p,
children, NULL, ACL_WRITE, NULL );
p = NULL;
if ( ! rs->sr_err ) {
ldap_pvt_thread_rdwr_wunlock(&li->li_giant_rwlock);
#ifdef NEW_LOGGING
LDAP_LOG( BACK_LDBM, ERR,
"ldbm_back_add: No write "
"access to parent (\"\").\n", 0, 0, 0 );
#else
Debug( LDAP_DEBUG_TRACE,
"no write access to parent\n", 0, 0, 0 );
#endif
send_ldap_error( op, rs,
LDAP_INSUFFICIENT_ACCESS,
"no write access to parent" );
return LDAP_INSUFFICIENT_ACCESS;
}
} else if ( !is_entry_glue( op->oq_add.rs_e )) {
ldap_pvt_thread_rdwr_wunlock(&li->li_giant_rwlock);
#ifdef NEW_LOGGING