summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNathan Kinder <nkinder@redhat.com>2006-11-07 19:59:02 +0000
committerNathan Kinder <nkinder@redhat.com>2006-11-07 19:59:02 +0000
commitcf5f003d8316aa3ea1bf1dee563a702043e56434 (patch)
tree0016cf97ede0ad2c6b22e664b0d03848cdde416a
parent22ad5a9a938cf0698f8a2e096ff863670c4d03af (diff)
downloadds-cf5f003d8316aa3ea1bf1dee563a702043e56434.tar.gz
ds-cf5f003d8316aa3ea1bf1dee563a702043e56434.tar.xz
ds-cf5f003d8316aa3ea1bf1dee563a702043e56434.zip
Resolves: 214463
Summary: Corrected ACI checking for userPassword during an add operation.
-rw-r--r--ldap/servers/slapd/add.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/ldap/servers/slapd/add.c b/ldap/servers/slapd/add.c
index d86466cf..6663a622 100644
--- a/ldap/servers/slapd/add.c
+++ b/ldap/servers/slapd/add.c
@@ -484,9 +484,9 @@ static void op_shared_add (Slapi_PBlock *pb)
/* Check ACI before checking password syntax */
if ( (err = slapi_access_allowed(pb, e, SLAPI_USERPWD_ATTR, NULL,
- SLAPI_ACL_WRITE)) != LDAP_SUCCESS) {
+ SLAPI_ACL_ADD)) != LDAP_SUCCESS) {
send_ldap_result(pb, err, NULL,
- "Insufficient 'write' privilege to the "
+ "Insufficient 'add' privilege to the "
"'userPassword' attribute", 0, NULL);
goto done;
}