upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-02-03 20:40:05 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#7347 Allow subtractive -a/z/i to work as expected

Browse source
This commit is contained in:
Ondřej Kuzník 2025-12-10 12:07:18 +00:00 committed by Quanah Gibson-Mount
parent b8df689969
commit 93d7b9ef7a
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
servers/slapd/acl.c
View file

@ -1860,6 +1860,11 @@ slap_acl_mask(
ACL_PRIV_CLR( *mask, modmask );
/* cleanup */
if ( (modmask & ACL_PRIV_WRITE) && (*mask & ACL_PRIV_WRITE) ) {
/* ITS#7347 Allow subtractive -a/z/i to keep the other counterpart (so
* that "=w" then "-a" -> "zi" etc.) */
ACL_PRIV_SET( *mask, ACL_ACCESS2PRIV(ACL_WRITE_) );
}
ACL_PRIV_CLR( *mask, ~ACL_PRIV_MASK );
} else {