Re: ACI's and 'by users read'

[Turbo Fredriksson <turbo@bayour.com>]

>>>>> "Pierangelo" == Pierangelo Masarati <ando@sys-net.it> writes:

    >> I'm trying to move a 'by users read' to ACI, but I'm having
    >> little luck...
    >> 
    >> Looking at the code (servers/slapd/acl.c), I see that '#users#'
    >> should be possible,

    Pierangelo> I don't see it in the code (RE22): "users" is not
    Pierangelo> handled in aci_mask();

OpenLDAP v2.2.23 (servers/slapd/acl.c):
----- s n i p -----
static struct berval
        [...]
        aci_bv_users            = BER_BVC("users"),
[...]
static slap_control_t
acl_mask(
[...]
                        } else if ( bvmatch( &b->a_dn_pat, &aci_bv_users ) ) {
                                if ( op->o_ndn.bv_len == 0 ) {
                                        continue;
                                }
----- s n i p -----