You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Alex Karasulu (JIRA)" <ji...@apache.org> on 2006/09/01 02:37:23 UTC
[jira] Closed: (DIRSERVER-617) Add ACI for Administrators group if
not already present
[ http://issues.apache.org/jira/browse/DIRSERVER-617?page=all ]
Alex Karasulu closed DIRSERVER-617.
-----------------------------------
Fix Version/s: 1.0-RC4
(was: 1.0)
Resolution: Fixed
Fixed in 1.0 branch:
http://svn.apache.org/viewvc?view=rev&revision=439118
Fixed in 1.1 branch:
http://svn.apache.org/viewvc?view=rev&revision=439119
Things were done a little differently here. I did not add an ACI but rather hardwired the Administrators group so this works with both the default authz service and the one that uses ACI. Basically all access control checks are bypassed for anyone in this very special admin group.
> Add ACI for Administrators group if not already present
> -------------------------------------------------------
>
> Key: DIRSERVER-617
> URL: http://issues.apache.org/jira/browse/DIRSERVER-617
> Project: Directory ApacheDS
> Issue Type: Task
> Components: ldap
> Affects Versions: 1.0-RC1, 1.0-RC2, pre-1.0, 1.0-RC3
> Reporter: Alex Karasulu
> Assigned To: Alex Karasulu
> Fix For: 1.1.0, 1.0-RC4
>
>
> Add ACI to enable Administrators group to have admin user like access to configure the server via the ou=system partition. This will only work when using the AuthorizationService for the X.500 basic authorization scheme as opposed to the DefaultAuthorizationService .
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira