bn8/ldapsaisie
1
0
Fork 0
mirror of https://gitlab.easter-eggs.com/ee/ldapsaisie.git synced 2024-07-01 07:53:43 +02:00
Code Issues Projects Releases Wiki Activity

LSsession: add trace messages in whoami() and canAccess methods

Browse source
This commit is contained in:
Benjamin Renard 2020-08-07 18:19:24 +02:00
parent 1f1a4e16fa
commit 5fcf3bbf9c
1 changed files with 13 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
src/includes/class/class.LSsession.php
View file

@ -2074,15 +2074,19 @@ class LSsession {
$retval[] = self :: $LSuserObjectType; $retval[] = self :: $LSuserObjectType;
foreach(self :: $LSprofiles as $profile => $infos) { foreach(self :: $LSprofiles as $profile => $infos) {
if(self :: isLSprofile($dn,$profile)) { if(self :: isLSprofile($dn, $profile)) {
$retval[]=$profile; $retval[] = $profile;
self :: log_trace("whoami($dn): is '$profile'");
} }
else
self :: log_trace("whoami($dn): is NOT '$profile'");
} }
if (self :: $dn == $dn) { if (self :: $dn == $dn) {
$retval[]='self'; $retval[] = 'self';
} }
self :: log_trace("whoami($dn): '".implode("', '", $retval)."'");
return $retval; return $retval;
} }
@ -2109,6 +2113,7 @@ class LSsession {
$whoami = self :: whoami($dn); $whoami = self :: whoami($dn);
if ($dn==self :: getLSuserObject() -> getValue('dn')) { if ($dn==self :: getLSuserObject() -> getValue('dn')) {
if (!self :: in_menu('SELF')) { if (!self :: in_menu('SELF')) {
self :: log_trace("canAccess('$LSobject', '$dn', '$right', '$attr'): SELF not in menu");
return; return;
} }
} }
@ -2116,12 +2121,14 @@ class LSsession {
$obj = new $LSobject(); $obj = new $LSobject();
$obj -> dn = $dn; $obj -> dn = $dn;
if (!self :: in_menu($LSobject,$obj -> subDnValue)) { if (!self :: in_menu($LSobject,$obj -> subDnValue)) {
self :: log_trace("canAccess('$LSobject', '$dn', '$right', '$attr'): $LSobject (for subDN='".$obj -> subDnValue."') not in menu");
return; return;
} }
} }
} }
else { else {
$objectdn=LSconfig :: get('LSobjects.'.$LSobject.'.container_dn').','.self :: getTopDn(); $objectdn=LSconfig :: get('LSobjects.'.$LSobject.'.container_dn').','.self :: getTopDn();
self :: log_trace("canAccess('$LSobject', '$dn', '$right', '$attr'): use object $LSobject container DN => '$objectdn'");
$whoami = self :: whoami($objectdn); $whoami = self :: whoami($objectdn);
} }
@ -2129,8 +2136,10 @@ class LSsession {
if ($attr) { if ($attr) {
if ($attr=='rdn') { if ($attr=='rdn') {
$attr=LSconfig :: get('LSobjects.'.$LSobject.'.rdn'); $attr=LSconfig :: get('LSobjects.'.$LSobject.'.rdn');
self :: log_trace("canAccess('$LSobject', '$dn', '$right', 'rdn'): RDN attribute = $attr");
} }
if (!is_array(LSconfig :: get('LSobjects.'.$LSobject.'.attrs.'.$attr))) { if (!is_array(LSconfig :: get('LSobjects.'.$LSobject.'.attrs.'.$attr))) {
self :: log_warning("canAccess('$LSobject', '$dn', '$right', '$attr'): Attribute '$attr' doesn't exists");
return; return;
} }
@ -2146,6 +2155,7 @@ class LSsession {
} }
} }
} }
self :: log_trace("canAccess($LSobject,$dn,$right,$attr): right detected = '$r'");
if (($right=='r')||($right=='w')) { if (($right=='r')||($right=='w')) {
if ($r==$right) { if ($r==$right) {