Wallet...::Root(3pm)

📦 version 1.7, in debian trixie, ubuntu resolute, ubuntu stonking

💖 Wallet::ACL::LDAP::Attribute::Root — the 3pm girlie 💖

okay bestie, so this is Wallet...::Root(3pm), a page from the User Contributed Perl Documentation section, and it's literally the root instance edition of the LDAP attribute ACL verifier. it's giving ✨main character energy✨ for the /root girlies and honestly? obsessed. 🎀

✨ NAME ✨

Wallet::ACL::LDAP::Attribute::Root — Wallet ACL verifier for LDAP attributes (root instances) 🦋

✨ SYNOPSIS ✨

my $verifier = Wallet::ACL::LDAP::Attribute::Root->new;
my $status = $verifier->check ($principal, "$attr=$value");
if (not defined $status) {
    die "Something failed: ", $verifier->error, "\n";
} elsif ($status) {
    print "Access granted\n";
} else {
    print "Access denied\n";
}

no cap, that's the whole vibe right there. 💅

✨ DESCRIPTION ✨

okay so listen, Wallet::ACL::LDAP::Attribute::Root does exactly what Wallet::ACL::LDAP::Attribute does, except it's pickier in the best way. it requires the principal to be a root instance — meaning it has to be in the form <principal>/root@<realm> — and then it strips the /root portion right off from the principal before checking it against the LDAP attribute and value.

and just like the base LDAP Attribute ACL verifier, the value of one of these ldap-attr-root ACLs is an attribute, followed by an equal sign, followed by a value. that's the whole recipe bestie. 🍓

so when does it say slay? it grants access to a given principal if and only if the LDAP entry for that principal (with /root stripped off, obviously 💁) has that attribute set to that value. no exceptions, no vibes-based exceptions, fr fr.

to actually use this object, you need to set the same configuration parameters as for Wallet::ACL::LDAP::Attribute. go read Wallet::Config(3) for the deets on those config parameters and how to set wallet configuration. ✨

✨ METHODS ✨

🌸 check(PRINCIPAL, ACL)

returns true if PRINCIPAL is granted access according to ACL, false if not, and undef on an error (peep DIAGNOSTICS below for that one, it's a whole thing).

ACL must be an attribute name and a value, separated by an equal sign (with no whitespace, okay? don't be messy 🙈).

PRINCIPAL will be granted access if it has an instance of root and if — with /root stripped off — its LDAP entry contains that attribute with that value. both boxes checked or it's a no. 👑

✨ DIAGNOSTICS ✨

same as for Wallet::ACL::LDAP::Attribute. literally identical, iykyk. 💀

✨ CAVEATS ✨

the instance to strip is not currently configurable. so like… /root is the moment, and it's staying the moment. periodt. 🎀

✨ SEE ALSO ✨

this module is part of the wallet system. the current version is available from <https://www.eyrie.org/~eagle/software/wallet/>. go get it bestie. 🫶

✨ AUTHORS ✨

  • Jon Robertson <jonrober@stanford.edu> 💖
  • Russ Allbery <eagle@eyrie.org> 💖

and that's the whole page, angel. 💜 this was Wallet...::Root(3pm) from perl v5.40.0, dated 2024-11-12 — thanks for reading, mwah, go forth and verify some ACLs. 🎀✨🦋

📦 where this page comes from