alisha17 / 389-ds-base

Forked from 389-ds-base 6 years ago
Clone

caf2feb Trac Ticket #448 - Possible to set invalid macros in Macro ACIs

Authored and Committed by Noriko Hosoi 11 years ago
    Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
    
    https://fedorahosted.org/389/ticket/448
    
    Bug description: Syntax checking code in acl did not check the
    macro syntax. Thus, invalide macro such as ($bogus.description)
    could have been unexpectedly added.
    
    Fix description: This patch adds the checking code: If acl contains
    a keyword starting with "($" or "[$", only one of "($dn)", "[$dn]",
    or "($attr." is allowed.