| commit | ccc903848b5a230e1537ec3bb500911cb163fbbb | |
| author | Matthieu Patou <mat@matws.net> | |
| Sun, 30 Dec 2012 10:27:25 +0000 (30 02:27 -0800) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Mon, 28 Jan 2013 08:22:34 +0000 (28 09:22 +0100) | ||
| tree | 7fb5b4335c48ce2bd5315462b4af76a7c615c9eb | treesnapshot (tar.gz zip) |
| parent | 62cc9ad980c4b08edb5de6808283580b44496455 | commitdiff |
dsdb-acl: Do not apply ACL on special DNs to hide attributes that the user shouldn't see
This fix frequent reindexing when using python script with a
user that is not system.
The reindexing is caused by ACL module hidding (removing) attributes in
the search request for all attributes in dn=@ATTRIBUTES and because
dsdb_schema_set_indices_and_attributes checks that the list of
attributes that it just calculated from the schema is the same as the
list written in @ATTRIBUTES, if not the list is replaced and a
reindexing is triggered.
Signed-off-by: Matthieu Patou <mat@matws.net>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit a0c59b4da1c5d8637c92e65c7cf54bb82bc8fca5)
This fix frequent reindexing when using python script with a
user that is not system.
The reindexing is caused by ACL module hidding (removing) attributes in
the search request for all attributes in dn=@ATTRIBUTES and because
dsdb_schema_set_indices_and_attributes checks that the list of
attributes that it just calculated from the schema is the same as the
list written in @ATTRIBUTES, if not the list is replaced and a
reindexing is triggered.
Signed-off-by: Matthieu Patou <mat@matws.net>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit a0c59b4da1c5d8637c92e65c7cf54bb82bc8fca5)
| source4/dsdb/samdb/ldb_modules/acl.c | diffblobblamehistory |