Issue 3615 - Access control and ancestor entries
Summary: Access control and ancestor entries
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-03-31 08:49 UTC by francois.beretti@enatel.com
Modified: 2014-08-01 21:06 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description francois.beretti@enatel.com 2005-03-31 08:49:32 UTC
Full_Name: Fran�ois Beretti
Version: 2.2.x
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (80.11.213.211)


I would find very usefull the ability to give an access to an entry, by an
ancestor (of a given level) of the entry.
For example, if I store objects under users, I want to give rights to the user,
i.e. the parent of the entry, or the parent of the parent if there are two
levels of tree under the user.

My post on openldap-devel :
http://www.openldap.org/lists/openldap-devel/200503/msg00141.html 

The final answer of Pierangelo Masarati :
http://www.openldap.org/lists/openldap-devel/200503/msg00148.html 


Comment 1 ando@openldap.org 2005-03-31 10:33:05 UTC
moved from Incoming to Software Enhancements
Comment 2 ando@openldap.org 2005-03-31 16:09:31 UTC
I have committed the proposed enhancement to HEAD; it is documented in 
slapd.access(5), in accordance to 
<http://www.openldap.org/lists/openldap-devel/200503/msg00148.html>.  
Please test and report.

p.


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497

Comment 3 francois.beretti@enatel.com 2005-03-31 16:25:23 UTC
Pierangelo,

I am very pleased to read your message !

Just one day between my first post and your implementation... you and 
the OpenLDAP dev team are really awesome.

Thank you very much

François

Pierangelo Masarati wrote:

> I have committed the proposed enhancement to HEAD; it is documented in 
> slapd.access(5), in accordance to 
> <http://www.openldap.org/lists/openldap-devel/200503/msg00148.html>.  
> Please test and report.
>
> p.
>
>
>    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497
>

Comment 4 ando@openldap.org 2005-04-11 10:16:39 UTC
changed notes
changed state Open to Test
Comment 5 ando@openldap.org 2005-04-11 10:17:06 UTC
changed notes
Comment 6 Kurt Zeilenga 2005-04-25 05:28:47 UTC
changed state Test to Closed
Comment 7 Howard Chu 2009-02-17 04:52:15 UTC
moved from Software Enhancements to Archive.Software Enhancements
Comment 8 OpenLDAP project 2014-08-01 21:06:58 UTC
implemented in HEAD; see "level{<n>}" style modifier