Functions For Access Control - Netscape DIRECTORY SERVER 6.1 - PLUG-IN Manual

Functions for Access Control

Functions for Access Control
This section contains reference information on access control routines.
Table 15-2 Access Control Routines
Function
slapi_access_allowed()
slapi_acl_check_mods()
slapi_acl_verify_aci_syntax()
slapi_access_allowed()
Determines if a user (who is requesting the current operation) has the access rights
to perform an operation on a given entry, attribute, or value.
Syntax
#include "slapi-plugin.h"
int slapi_access_allowed( Slapi_PBlock *pb, Slapi_Entry *e,
char *attr, struct berval *val, int access );
Parameters
This function takes the following parameters:
pb
e
attr
val
access
The value of the
218 Netscape Directory Server Plug-In Programmer's Guide • August 2002
Description
Determines if a user (who is requesting the current operation) has the
access rights to perform an operation on a given entry, attribute, or value
Determines if a user has the rights to perform the specified modifications
on an entry.
Determines whether or not the access control items (ACIs) on an entry are
valid.
Parameter block passed into this function.
Entry for which you want to check the access rights.
Attribute for which you want to check the access rights.
Pointer to the berval structure containing the value for which you want
to check the access rights.
Type of access rights that you want to check for (for example, to check for
write access, pass SLAPI_ACL_WRITE as the value of this argument).
argument can be one of the following:
access