slapd-modules/rbac/rbacsess.c

197 rbac_is_session_owner( rbac_session_t *sessp, rbac_req_t *reqp )
201 	if ( BER_BVISEMPTY( &sessp->uid ) || BER_BVISEMPTY( &reqp->uid ) ) {
207 	if ( !ber_bvstrcasecmp( &sessp->uid, &reqp->uid ) ) {
217 rbac_session_add_role( Operation *op, rbac_session_t *sessp, rbac_req_t *reqp )
229 	tenantp = rbac_tid2tenant( &reqp->tenantid );
237 	rbac_to_lower( &reqp->role );
239 	//ber_dupbv( &vals[0], &reqp->roles[0]);
240 	ber_dupbv( &vals[0], &reqp->role );
277 rbac_session_drop_role( Operation *op, rbac_session_t *sessp, rbac_req_t *reqp )
288 	tenantp = rbac_tid2tenant( &reqp->tenantid );
304 	//ber_dupbv( &m->sml_values[0], &reqp->roles[0]);
307 	rbac_to_lower( &reqp->role );
309 	ber_dupbv( &m->sml_values[0], &reqp->role );
314 	ber_dupbv( &m->sml_nvalues[0], &reqp->role );
317 	//ber_dupbv( &m->sml_nvalues[0], &reqp->roles[0]);
318 	//ber_dupbv( &m->sml_nvalues[0], &reqp->role);
646 	rbac_req_t *reqp = NULL;
651 	return reqp;
655 rbac_session_byid_fake( Operation *op, rbac_req_t *reqp )
668 	if ( !rbac_is_valid_session_id( &reqp->sessid ) ) {
671 				reqp->sessid.bv_val );
684 	tenantp = rbac_tid2tenant( &reqp->tenantid );
689 	strncpy( &fbuf[0] + sizeof(RBAC_SESSION_RDN_EQ) - 1, reqp->sessid.bv_val,
690 			reqp->sessid.bv_len );
729 rbac_session_byid( Operation *op, rbac_req_t *reqp )
741 	if ( !rbac_is_valid_session_id( &reqp->sessid ) ) {
744 				reqp->sessid.bv_val );
757 	tenantp = rbac_tid2tenant( &reqp->tenantid );
762 	strncpy( &fbuf[0] + sizeof(RBAC_SESSION_RDN_EQ) - 1, reqp->sessid.bv_val,
763 			reqp->sessid.bv_len );
826 		rbac_req_t *reqp,
848 	tenantp = rbac_tid2tenant( &reqp->tenantid );
859 	sess_perm_req.sessid = &reqp->sessid;
905 	rbac_audit( op, SessionPermissions, sessp, reqp, rc, (char *)rs->sr_text );
960 		rbac_req_t *reqp,
964 	if ( !sessp || !reqp || !userp ) {
969 	if ( reqp->roles == NULL || BER_BVISNULL( &reqp->roles[0] ) ) {
970 		//if (!reqp->roles || BER_BVISNULL(&reqp->roles[0])) {
989 		for ( i = 0; !BER_BVISNULL( &reqp->roles[i] ); i++ ) {
991 				if ( !ber_bvstrcasecmp( &reqp->roles[i], &userp->roles[j] ) ) {