From b9771a9a3202b4d3a8562ed7359c824f8922b4fe Mon Sep 17 00:00:00 2001

From: Noriko Hosoi <nhosoi@redhat.com>

Date: Wed, 15 Oct 2014 16:20:51 -0700

Subject: [PATCH 76/84] Ticket #47553 - Enhance ACIs to have more control over

 MODRDN operations

Description: Macro SLAPI_ACL_ALL does not contain SLAPI_ACL_MODDN.

Thus, even though all operations are allowed by "allow (all)", just

modrdn fails with "Insufficient access (50)".

https://fedorahosted.org/389/ticket/47553

Reviewed by tbordaz@redhat.com (Thank you, Thierry!!)

(cherry picked from commit 4aafe7444d983c08b16a84b7c23c8d303de45dc6)

---

 ldap/servers/slapd/slapi-plugin.h | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ldap/servers/slapd/slapi-plugin.h b/ldap/servers/slapd/slapi-plugin.h

index dfe75eb..5a7af5e 100644

--- a/ldap/servers/slapd/slapi-plugin.h

+++ b/ldap/servers/slapd/slapi-plugin.h

@@ -237,12 +237,12 @@ NSPR_API(PRUint32) PR_fprintf(struct PRFileDesc* fd, const char *fmt, ...)

 #define SLAPI_ACL_ADD		0x20

 #define SLAPI_ACL_SELF		0x40

 #define SLAPI_ACL_PROXY		0x80

-#define SLAPI_ACL_ALL		0x7f

 /* Values 0x200 and 0x400 are booked (acl.h) by

  * ACLPB_SLAPI_ACL_WRITE_ADD

  * ACLPB_SLAPI_ACL_WRITE_DEL

  */

 #define SLAPI_ACL_MODDN         0x0800

+#define SLAPI_ACL_ALL           0x087f

 /*

-- 

1.9.3