Need a change to the ACL code

[Andrew Bartlett]

On Sun, 2010-03-07 at 21:54 +0200, Nadezhda Ivanova wrote:
> Hi Andrew,
> Attached is the check for access on RDN + test, so far only on rename.
> I looked the the rdn module code and just could not see what needs to
> be added on add - I do not see the rdn doing any additional adds, and
> if the user has no permissions to add an object, the acl module will
> handle it before it gets to the rdn. I could of course be wrong. Let
> me know if there's anything else I can help you with.
> 
> Regards,
> Nadya 

On the add, it just needs to include the RDN in the list of attributes
to check.  (As the rdn_name module will make the RDN a normal attribute
as well later). 

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100308/22d58a4b/attachment.pgp>