From a681de60fa70b612817f2a49a7ffb87520bb8a14 Mon Sep 17 00:00:00 2001
From: leitner <leitner>
Date: Sat, 27 Aug 2005 23:01:46 +0000
Subject: [PATCH] more todo

---
 TODO | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/TODO b/TODO
index b5037d0..d37cb22 100644
--- a/TODO
+++ b/TODO
@@ -27,3 +27,14 @@ scales.  How would conflict detection and resolution be done?
 Think about an iCal frontend.
 
 Make tinyldap a good back-end for blogs and message boards.
+
+
+
+
+
+The ACL checks need to include the attributes in the filter of the
+query.  Right now, if there is a read ACL prohibiting reading of "sn",
+one could still query all records with (sn=Fnord).
+
+Also, the attribute value list should be fixed up so there are no string
+compares in the attribute check in the acl and normal answers.