From dev-return-19886-apmail-directory-dev-archive=directory.apache.org@directory.apache.org Sun Jul 01 14:29:30 2007 Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 92500 invoked from network); 1 Jul 2007 14:29:26 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 1 Jul 2007 14:29:26 -0000 Received: (qmail 41982 invoked by uid 500); 1 Jul 2007 14:29:29 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 41773 invoked by uid 500); 1 Jul 2007 14:29:29 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 41708 invoked by uid 99); 1 Jul 2007 14:29:28 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 01 Jul 2007 07:29:28 -0700 X-ASF-Spam-Status: No, hits=-100.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.4] (HELO brutus.apache.org) (140.211.11.4) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 01 Jul 2007 07:29:24 -0700 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id C4F5B7141ED for ; Sun, 1 Jul 2007 07:29:04 -0700 (PDT) Message-ID: <28481942.1183300144803.JavaMail.jira@brutus> Date: Sun, 1 Jul 2007 07:29:04 -0700 (PDT) From: "Emmanuel Lecharny (JIRA)" To: dev@directory.apache.org Subject: [jira] Updated: (DIRSERVER-257) [Access Control] Autonomous areas for AC must not overlap In-Reply-To: <2046966089.1130746495237.JavaMail.jira@ajax.apache.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/DIRSERVER-257?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny updated DIRSERVER-257: ---------------------------------------- Affects Version/s: (was: 1.0-RC3) (was: 1.0-RC4) (was: 1.0-RC2) (was: 1.0-RC1) 1.0.2 1.5.0 Fix Version/s: 1.0.3 1.5.2 Postponed to 1.0.3 and 1.5.2 > [Access Control] Autonomous areas for AC must not overlap > --------------------------------------------------------- > > Key: DIRSERVER-257 > URL: https://issues.apache.org/jira/browse/DIRSERVER-257 > Project: Directory ApacheDS > Issue Type: Bug > Components: core > Affects Versions: 1.0.2, 1.5.0 > Reporter: Alex Karasulu > Assignee: Alex Karasulu > Priority: Trivial > Fix For: 1.5.2, 1.0.3 > > > Presently the subentry subsystem associates entries with all selecting subentries regardless of autonomous area demarcations. What this means is AAA's can overlap. When the AP of an accessControlSpecificArea is the decendent of the AP of another accessControlSpecificArea those areas should not intersect such that the subentries of the first area do not effect entries of the second area. This is not the case. The subentry subsystem associates entries with effecting subentires without checking to see if those subentries are in a different AAA in these configurations where an AAA is under another AAA. > We need to track all AP of AAA's within the system. Before associating an entry with an AP's subentries checks should be made to determine under which AAA the entry resides. Only those subentries associated with that AAA should be associated with the entry. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.