To authenticate the user value, the evaluation function calls the attribute getter function for the user attribute. The attribute getter function for the user attribute retrieves the username and password from Mozilla's request and uses them to authenticate to the LDAP database. If a match is found, the function makes the username available to the evaluation function. It then stipulates that subjects with the user value Mozilla are denied read access to the resource. The evaluation function takes the returned user value and compares it against the authorization ACE and finds that Mozilla is denied read access.
Specific rights apply to specific types of resources.
An evaluation function for evaluating the value of the attribute against the ACE to determine if the subject should be allowed access to the resource. A flush function for freeing any cached attribute data when an ACL is freed from memory. As part of the process of evaluating the attribute, the LAS module gets the value of the attribute from the subject. To get the value of an attribute, an LAS module can call an attribute getter function. Database Some attributes getter functions check the value of the attribute against the value in an authentication database.