change to acl_read module for supporting dirsync module

Tue Mar 8 15:34:36 MST 2011

Hello Nadya,

Can you have a look at this:

http://git.samba.org/?p=mat/samba.git;a=blobdiff;f=source4/dsdb/samdb/ldb_modules/acl_read.c;h=e7c54c970bd0ff9aaa8f1e5e85e7754bb845a7c6;hp=cde6d11c75bd07d4f6dd032e9f01d2b8e78eb2a9;hb=a53c047602aa60dca71ac1c42e5b5263b046d107;hpb=370d40b848b18bdceeda06f156662860a525615d

And tell me if you are OK, basically it's about not to return 
LDB_SUCCESS when a searched attribute is not accessible but instead to 
remove the replPropertyMetaData attribute to give the signal to dirsync 
that the user didn't have an access on this object and so an empty DN 
with just the objectGUID should be returned.

Matthieu.

-- 
Matthieu Patou
Samba Team        http://samba.org
Private repo      http://git.samba.org/?p=mat/samba.git;a=summary