https://bugs.openldap.org/show_bug.cgi?id=9634
Issue ID: 9634 Summary: ACL processing of <what> clauses should evaluate regex pattern after other variants Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs@openldap.org Reporter: michael@stroeder.com Target Milestone: ---
Evaluating regex patterns cost performance.
Thus cheaper <what> parts (e.g. attrs=) should be evaluated before dn.regex= and val.regex=. Likely evaluating simple dn.(sub|one|exact) should be split from processing dn.regex.