Attachment 310471 Details for Bug 437525 – cvs commit message

cvs commit message

ger.commit (text/plain), 5.33 KB, created by Noriko Hosoi on 2008-06-27 19:30:10 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Noriko Hosoi

Created: 2008-06-27 19:30:10 UTC

Size: 5.33 KB

patch

obsolete

>Resolves: #437525
>Summary: GER: allow GER for non-existing entries
>Description:
>[slapd/charray.c]
>new: charray_merge_nodup -- merge 2 string arrays skipping the duplicates
>modified: charray_remove -- introduced "freeit" flag.  If true, the removed
>string is freed.  (The API is used only in chainingdb.  The change is applied
>to the plugin.)
>
>[slapd/opshared.c]
>modified: check OP_FLAG_GET_EFFECTIVE_RIGHTS in the iterate to support
>"@<objectclass>".  It's needed to do at the location since we have to call acl
>plugin even
>when no entries are returned from the search.  If no entries are returned and
>"@<objectclass>" is found in the attribute list, acl effective rights code
>generates the corresponding template entry.
>
>[slapd/pblock.c]
>place to store gerattrs is added (SLAPI_SEARCH_GERATTRS), where gerattrs is an
>array of strings which store "...@<objectclass>".
>
>[slapd/result.c]
>moved OP_FLAG_GET_EFFECTIVE_RIGHTS checking to iterate (opshared.c)
>
>[slapd/schema.c]
>new: slapi_schema_list_objectclass_attributes -- return the required and/or
>allowed attributes belonging to the given objectclass.  This is used to support"*" and "+" in the get effective rights.
>new: slapi_schema_get_superior_name -- return the superior objectclass name of
>the given objectclass.
>
>[slapd/search.c]if "<attr>@<objectclass>" is found in the attribute list, cut the <attr> part
>out and added to the attrs array (pblock SLAPI_SEARCH_ATTRS) and store the
>original
>string to the gerattrs (pblock SLAPI_SEARCH_GERATTRS).
>
>[plugin/acl/acleffectiverights.c]
>modified: _ger_g_permission_granted -- if the requester and the subject user
>are
>identical, give "g" permission
>modified: _ger_parse_control -- replaced strcpy with memmove since strcpy does
>not guarantee the result of the overlap copy.
>modified: _ger_get_attrs_rights -- support "*" (all attributes belonging to the
>object) and "+" (operational attributes).  If repeated attributes are found in
>the given attribute list, they are reduced to one.
>new: _ger_generate_template_entry -- generate a template entry if
>"@<objectclass>" is passed.
>
>[pluginc/cb/*]
>adjusted to the updated charray_remove.
>
>Please see also this wiki page for the overview and test cases.
>http://directory.fedoraproject.org/wiki/Get_Effective_Rights_for_non-present_attributes
>CVS: ----------------------------------------------------------------------
>CVS: Enter Log.  Lines beginning with `CVS:' are removed automatically
>CVS:
>CVS: Committing in .
>CVS:
>CVS: Modified Files:
>CVS:    ldap/servers/slapd/charray.c ldap/servers/slapd/opshared.c
>CVS:    ldap/servers/slapd/pblock.c ldap/servers/slapd/result.c
>CVS:    ldap/servers/slapd/schema.c ldap/servers/slapd/search.c
>CVS:    ldap/servers/slapd/slapi-plugin.h
>CVS:    ldap/servers/slapd/slapi-private.h
>CVS:    ldap/servers/plugins/acl/acleffectiverights.c
>CVS:    ldap/servers/plugins/chainingdb/cb_config.c
>CVS:    ldap/servers/plugins/chainingdb/cb_controls.c
>CVS:    ldap/servers/plugins/chainingdb/cb_instance.c
>CVS: ----------------------------------------------------------------------
>Checking in ldap/servers/slapd/charray.c;
>/cvs/dirsec/ldapserver/ldap/servers/slapd/charray.c,v  <--  charray.c
>new revision: 1.7; previous revision: 1.6
>done
>Checking in ldap/servers/slapd/opshared.c;
>/cvs/dirsec/ldapserver/ldap/servers/slapd/opshared.c,v  <--  opshared.c
>new revision: 1.12; previous revision: 1.11
>done
>Checking in ldap/servers/slapd/pblock.c;
>/cvs/dirsec/ldapserver/ldap/servers/slapd/pblock.c,v  <--  pblock.c
>new revision: 1.14; previous revision: 1.13
>done
>Checking in ldap/servers/slapd/result.c;
>/cvs/dirsec/ldapserver/ldap/servers/slapd/result.c,v  <--  result.c
>new revision: 1.13; previous revision: 1.12
>done
>Checking in ldap/servers/slapd/schema.c;
>/cvs/dirsec/ldapserver/ldap/servers/slapd/schema.c,v  <--  schema.c
>new revision: 1.15; previous revision: 1.14
>done
>Checking in ldap/servers/slapd/search.c;
>/cvs/dirsec/ldapserver/ldap/servers/slapd/search.c,v  <--  search.c
>new revision: 1.9; previous revision: 1.8
>done
>Checking in ldap/servers/slapd/slapi-plugin.h;
>/cvs/dirsec/ldapserver/ldap/servers/slapd/slapi-plugin.h,v  <--  slapi-plugin.h
>new revision: 1.23; previous revision: 1.22
>done
>Checking in ldap/servers/slapd/slapi-private.h;
>/cvs/dirsec/ldapserver/ldap/servers/slapd/slapi-private.h,v  <--  slapi-private.h
>new revision: 1.24; previous revision: 1.23
>done
>Running syncmail...
>Mailing relnotes@fedoraproject.org...
>...syncmail done.
>Running syncmail...
>Mailing cvsdirsec@fedora.redhat.com...
>...syncmail done.
>Checking in ldap/servers/plugins/acl/acleffectiverights.c;
>/cvs/dirsec/ldapserver/ldap/servers/plugins/acl/acleffectiverights.c,v  <--  acleffectiverights.c
>new revision: 1.8; previous revision: 1.7
>done
>Running syncmail...
>Mailing relnotes@fedoraproject.org...
>...syncmail done.
>Running syncmail...
>Mailing cvsdirsec@fedora.redhat.com...
>...syncmail done.
>Checking in ldap/servers/plugins/chainingdb/cb_config.c;
>/cvs/dirsec/ldapserver/ldap/servers/plugins/chainingdb/cb_config.c,v  <--  cb_config.c
>new revision: 1.7; previous revision: 1.6
>done
>Checking in ldap/servers/plugins/chainingdb/cb_controls.c;
>/cvs/dirsec/ldapserver/ldap/servers/plugins/chainingdb/cb_controls.c,v  <--  cb_controls.c
>new revision: 1.9; previous revision: 1.8
>done
>Checking in ldap/servers/plugins/chainingdb/cb_instance.c;
>/cvs/dirsec/ldapserver/ldap/servers/plugins/chainingdb/cb_instance.c,v  <--  cb_instance.c
>new revision: 1.9; previous revision: 1.8
>done

Actions: View

Attachments on bug 437525: 309953 | 310288 | 310471