Extensive travel in recent months allowed me to finish this code.
Here is the updated design:
0001 - Fix in case the Ref array is empty and we need to print/debug it
0002 - Declaration of the new function to do access checks
0003 - Big patch with core functionality
0004 - Updated access check code to use new internal access control function
0005 - File with expected output for unit test validation
0006 - Makefile and related changes to start building new code
No rush, take your time. :-)
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.