[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Allowing users to add, but not delete, entries?

To: Gervase Markham <gerv@mozilla.org>
Subject: Re: Allowing users to add, but not delete, entries?
From: Howard Chu <hyc@symas.com>
Date: Thu, 03 Mar 2011 05:49:15 -0800
Cc: openldap-technical@openldap.org
In-reply-to: <4D6F97E1.5000702@mozilla.org>
References: <4D6F97E1.5000702@mozilla.org>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:2.0b11pre) Gecko/20110130 Firefox/4.0b11pre SeaMonkey/2.1b2pre

Gervase Markham wrote:

Hi,

Summary: is it possible to configure access control such that users to
can add, but not delete, entries?

This is difficult, because as far as I can see the "write" permission
does not distinguish between adding and deleting.

Can someone tell me if this is possible?


Sounds to me like you haven't read the slapd.access(5) manpage.

The answer is "yes." Read the section on "THE <ACCESS> FIELD" in the manpage.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

Follow-Ups:
- Re: Allowing users to add, but not delete, entries?
  - From: Gervase Markham <gerv@mozilla.org>

References:
- Allowing users to add, but not delete, entries?
  - From: Gervase Markham <gerv@mozilla.org>

Prev by Date: Allowing users to add, but not delete, entries?
Next by Date: Re: Allowing users to add, but not delete, entries?
Index(es):
- Chronological
- Thread