Increased ACL checks

-We should make this configureable, this costs time.

git-svn-id: https://oss.gonicus.de/repositories/gosa/trunk@17039 594d385d-05f5-0310-b6e9-bd551577e9d8

diff --git a/gosa-core/include/class_userinfo.inc b/gosa-core/include/class_userinfo.inc
index 4ac5ea37c9167bed0153341ac223e11577f85712..bcff8c8360da076be418a7c04a057d5195278b50 100644 (file)
--- a/gosa-core/include/class_userinfo.inc
+++ b/gosa-core/include/class_userinfo.inc
@@ -372,6 +372,13 @@ class userinfo
       trigger_error("Invalid ACL class '".$aclClass."'! ({$object})");
       return("");
     }
+    if(isset($aclClass) &&class_available($aclClass)){
+      $plInfo = call_user_func(array($aclClass, 'plInfo'));
+      if(!empty($attribute) && !isset($plInfo['plProvidedAcls'][$attribute])){
+        trigger_error("Invalid ACL attribute '".$attribute."'! ({$object})");
+        return("");
+      }
+    }
 
     /* Detect the set of ACLs we have to check for this object 
      */