Feature Request: Access restrictions on attribute stubs (ITS#2497)

[quanah@stanford.edu]

Full_Name: Quanah Gibson-Mount
Version: 2.1.18
OS: Solaris 8
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (171.64.19.82)


This is a feature request for OpenLDAP 2.2

I would like to be able to grant access to portions of an attribute.  My example
here is our suprivilegegroup attribute.  It has values in the form of:

supriviligegroup=stanford:chemistry:faculty
supriviligegroup=stanford:chemistry:student
supriviligegroup=stanford:gsb:student
supriviligegroup=stanford:gsb:faculty

etc (there are a lot of other values)

What I would like to be able to do is the following:

access to <combination of dn.style bits, filters here>
attr=supriviligegroup=stanford:gsb:* by <whomever>

etc.

Thanks,
Quanah