//is filtered (it may not contain enough attribute information
//to evaluate correctly). See the the comments below.
if(operation instanceof SearchOperation && (rights == ACI_READ)) {
//Checks if a geteffectiverights control was sent and
//sets up the structures needed.
GetEffectiveRightsRequestControl getEffectiveRightsControl =
(GetEffectiveRightsRequestControl)
operation.getAttachment(OID_GET_EFFECTIVE_RIGHTS);
if(getEffectiveRightsControl != null) {
hasGetEffectiveRightsControl=true;
if(getEffectiveRightsControl.getAuthzDN() == null)
this.authzid=getClientDN();
else
this.authzid=getEffectiveRightsControl.getAuthzDN();
this.specificAttrs=getEffectiveRightsControl.getAttributes();
}
//If an ACI evaluated because of an Targetattr="*", then the
//AciHandler.maySend method signaled this via adding this attachment
//string.
String allUserAttrs=