dsdb-acl: Do not apply ACL on special DNs to hide attributes that the user shouldn...
authorMatthieu Patou <mat@matws.net>
Sun, 30 Dec 2012 10:27:25 +0000 (02:27 -0800)
committerMatthieu Patou <mat@matws.net>
Thu, 17 Jan 2013 08:20:45 +0000 (00:20 -0800)
commita0c59b4da1c5d8637c92e65c7cf54bb82bc8fca5
tree2c1485456cf2fbbb280d1379b5ddb7f0c24207b8
parent961a1fbbbccb7fbb14634ec230985f3fd000b050
dsdb-acl: Do not apply ACL on special DNs to hide attributes that the user shouldn't see

This fix frequent reindexing when using python script with a
user that is not system.
The reindexing is caused by ACL module hidding (removing) attributes in
the search request for all attributes in dn=@ATTRIBUTES and because
dsdb_schema_set_indices_and_attributes checks that the list of
attributes that it just calculated from the schema is the same as the
list written in @ATTRIBUTES, if not the list is replaced and a
reindexing is triggered.

Signed-off-by: Matthieu Patou <mat@matws.net>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source4/dsdb/samdb/ldb_modules/acl.c