elecharny commented on PR #382: URL: https://github.com/apache/directory-server/pull/382#issuecomment-6564910444
I have added a unit test that demonstrates the issue. Bottom line we directly write back each modified entry to teh user who have started a persistent search, with no authz check. Adding this chekc is not trivial: first we need to have the identity of the user who has started the PSearch, second we must activate the authz filter before sending back an entry, but we shoudl also avoid doing a search: we have the full entry at hand. Working on that. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
