Re: ACIs rely on multivalue attribute order (Was: are mulivalued attributes really unordered?)

[Michael Ströder <michael@stroeder.com>]

Pierangelo Masarati wrote:
> > > OpenLDAPaci: 1#entry#grant;r,w,s,c;[all]#group#cn=enterprise [..]
> > > OpenLDAPaci: 2#entry#grant;r,w,s,c;[all]#group#cn=dallas [..]
> > > OpenLDAPaci: 3#entry#grant;r,w,s,c;userPassword,mail; [..]
> > > OpenLDAPaci: 4#entry#grant;r,s,c;[all]#group#cn=all [..]
> > >            ^^^
> > > AFAICS the prefixed numbers preserve the ACI evaluation order.
>
> [..] this is
> a clear violation of the protocol and thus will not portable,

Ordering is preserved by definition and proper handling of the ACI 
syntax (not LDAP syntax or protocol). See numbered prefix in the 
attribute values above. Ordering at protocol level is *not* assumed for 
ACIs.

Ciao, Michael.