upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-01 12:39:35 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Better explanation of when access control processing stops

Browse source
This commit is contained in:
Karl O. Pinc 2020-04-22 17:43:39 -05:00 committed by Ondřej Kuzník
parent 2b402a5f34
commit 7077dc3138
1 changed files with 22 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
doc/man/man5/slapd.access.5
View file

@ -95,6 +95,8 @@ clause matches the accessor's properties, its
and
.B <control>
clauses are evaluated.
.LP
Access control checking stops at the first match of the
.B <what>
and
@ -110,8 +112,26 @@ clause list is implicitly terminated by a
by * none stop
.fi
.LP
clause that results in stopping the access control with no access
privileges granted.
.B <control>
clause. This implicit
.B <control>
stops access directive evaluation with no more access privileges
granted to anyone else.
To stop access directive evaluation only when both
.B <who>
and
.B <what>
match, add an explicit
.LP
.nf
by * break
.fi
.LP
to the end of the
.B <who>
clause list.
.LP
Each
.B <what>
clause list is implicitly terminated by a