Re: Regexp in rootdn and set-resolving of monitor attr

[Christian Manal <moenoel@informatik.uni-bremen.de>]

Am 01.04.2011 14:09, schrieb Kilian Röhner:
> So is it just possible to put into an access-clause something like this?:
> 
> access to dn.exact="ou=abc" attrs=children
> by dn.exact="cn=foo,cn=bar" add

As the manpage states, to add an entry you need 'write' permissions on
the parents pseudo-attribute "children" and at least 'add' permissions
on the pseudo-attribute "entry" of the entry you want to add itself.
Which means you'd need something like this:

   access to dn.exact="ou=abc" attrs=children
      by dn.exact="cn=foo,cn=bar" write

   access to dn.sub="ou=abc" attrs=entry
      by dn.exact="cn=foo,cn=bar" add



Regards,
Christian Manal