nl_tokens: / --- Shared handlers
pl_tokens: function authorize ( req , <mask> , next ) { /* Any user may search after bind, only cn=root has full power */ var isSearch = ( req instanceof ldap . SearchRequest ) ; if ( ! req . connection . ldap . bindDN . equals ( 'cn=root' ) && ! isSearch ) return next ( new ldap . InsufficientAccessRightsError ( ) ) ; return next ( ) ; }