| Alex Karasulu (JIRA) 2005-10-31, 5:45 pm |
| [ http://issues.apache.org/jira/brows...action_12356387 ]
Alex Karasulu commented on DIREVE-297:
--------------------------------------
Note that this bug makes AAA's under other AAA's behave like inner administrative areas.
> [Access Control] Autonomous areas for AC must not overlap
> ---------------------------------------------------------
>
> Key: DIREVE-297
> URL: http://issues.apache.org/jira/browse/DIREVE-297
> Project: Directory Server
> Type: Bug
> Reporter: Alex Karasulu
> Assignee: Alex Karasulu
> Fix For: 0.9.4
>
> Presently the subentry subsystem associates entries with all selecting subentries regardless of autonomous area demarcations. What this means is AAA's can overlap. When the AP of an accessControlSpecificArea is the decendent of the AP of another acces
sControlSpecificArea those areas should not intersect such that the subentries of the first area do not effect entries of the second area. This is not the case. The subentry subsystem associates entries with effecting subentires without checking to see
if those subentries are in a different AAA in these configurations where an AAA is under another AAA.
> We need to track all AP of AAA's within the system. Before associating an entry with an AP's subentries checks should be made to determine under which AAA the entry resides. Only those subentries associated with that AAA should be associated with the
entry.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secur...nistrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
|