Commit 9d307b42 authored by Kurt Zeilenga's avatar Kurt Zeilenga
Browse files

ITS#1530 no value replace ACL fix

parent f91d5f48
......@@ -1091,10 +1091,20 @@ acl_check_modlist(
switch ( mlist->sml_op ) {
case LDAP_MOD_REPLACE:
case LDAP_MOD_ADD:
if ( mlist->sml_bvalues == NULL ) {
if ( ! access_allowed( be, conn, op, e,
mlist->sml_desc, NULL, ACL_WRITE ) )
{
return( 0 );
}
break;
}
/* fall thru */
case LDAP_MOD_ADD:
assert( mlist->sml_bvalues != NULL );
for ( bv = mlist->sml_bvalues; bv->bv_val != NULL; bv++ ) {
if ( ! access_allowed( be, conn, op, e,
mlist->sml_desc, bv, ACL_WRITE ) )
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment