upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-18 04:44:17 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#6688 enforce search ACL in back-perl

Browse source
This commit is contained in:
Howard Chu 2011-06-09 15:25:32 -07:00
parent 6b95e5941c
commit 53bb95a2e3
1 changed files with 21 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
servers/slapd/back-perl/search.c
View file

@ -35,6 +35,27 @@ perl_back_search(
int i;
PERL_SET_CONTEXT( PERL_INTERPRETER );
{
Entry base = {0};
slap_mask_t mask;
/* Require search access to base */
base.e_name = op->o_req_dn;
base.e_nname = op->o_req_ndn;
if ( !access_allowed_mask( op, &base, slap_schema.si_ad_entry,
NULL, ACL_SEARCH, NULL, &mask ))
{
if ( !ACL_GRANT( mask, ACL_DISCLOSE )) {
rs->sr_err = LDAP_NO_SUCH_OBJECT;
} else {
rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
}
send_ldap_result( op, rs );
return rs->sr_err;
}
}
ldap_pvt_thread_mutex_lock( &perl_interpreter_mutex );
{