Lines Matching full:operations

40  * examine principal and policy objects and to perform DB operations.
54 /* The welcomer authorizes all getprinc operations, since kadmin uses them as a
63 /* The welcomer authorizes addprinc operations which set a policy "VIP". */
75 /* The bouncer denies addprinc operations which include a maximum lifetime. */
85 /* The welcomer authorizes modprinc operations which only set maxrenewlife. */
95 /* The bouncer denies modprinc operations if the target principal has an even
106 /* The welcomer authorizes setstr operations for the attribute "note". */
115 /* The bouncer denies setstr operations if the value is more than 10 bytes. */
124 /* The welcomer authorizes delprinc operations if the target principal starts
136 /* The bouncer denies delprinc operations if the target principal has the
155 /* The welcomer authorizes rename operations if the first components of the
168 /* The bouncer denies rename operations if the source principal starts with
181 /* The welcomer authorizes addpol operations which set a minlength of 3. */
192 /* The bouncer denies addpol operations if the name is 3 bytes or less. */
201 /* The welcomer authorizes modpol operations which only change min_life. */
210 /* The bouncer denies modpol operations which set pw_min_life above 10. */
221 /* The welcomer authorizes getpol operations if the policy and client principal
233 /* The bouncer denies getpol operations if the policy name begins with 'x'. */