[#DIRSERVER-725] Access control permission Import is only meaningful for prescriptive ACI

Directory ApacheDS

Access control permission Import is only meaningful for prescriptive ACI

Created: 29/Aug/06 08:17 PM Updated: 30/Aug/06 07:08 AM

Return to search

Component/s:

None

Affects Version/s:

1.5.0, 1.0-RC4, 1.0-RC3, 1.0-RC2, 1.0-RC1, pre-1.0

Fix Version/s:

1.5.0, 1.0-RC4

Time Tracking:

Not Specified

Resolution Date:

30/Aug/06 07:08 AM

Description

« Hide

As stated in X.501 L.4:

"If granted, allows entries, including all subordinates, to be relocated at the designated location in the DIT
in a ModifyDN operation. Import is only meaningful as prescriptive ACI."

However our current implementation considers also entry ACIs that includes Import permissions.

Here is a code snippet from our implementation:

Collection destTuples = new HashSet();
        addPerscriptiveAciTuples( proxy, destTuples, oriChildName, entry );
        addEntryAciTuples( destTuples, entry );
        addSubentryAciTuples( proxy, destTuples, oriChildName, entry );
        engine.checkPermission( proxy, userGroups, userName, principal.getAuthenticationLevel(), oriChildName, null,
            null, IMPORT_PERMS, tuples, entry );

The line
addEntryAciTuples( destTuples, entry );
needs to be removed in from the relevant code parts.

All

Comments

Work Log

Change History

Subversion Commits

Sort Order:

Ersin Er made changes - 30/Aug/06 06:32 AM

Field	Original Value	New Value
Assignee		Ersin Er [ ersiner ]

Ersin Er made changes - 30/Aug/06 06:34 AM

Status

Open [ 1 ]

In Progress [ 3 ]

Ersin Er made changes - 30/Aug/06 07:07 AM

Status

In Progress [ 3 ]

Open [ 1 ]

Ersin Er made changes - 30/Aug/06 07:08 AM

Status	Open [ 1 ]	Closed [ 6 ]
Resolution		Fixed [ 1 ]