Re: ldapACI: familyOID

[mcs@netscape.com (Mark C Smith)]

Ellen Stokes wrote:
> 
> (EJS)  A case where family OID could be useful is where the current
> ldapACI attribute permission set is just extended, such as for adding
> get/set/manage/use (which we removed from this draft).  However, I
> see both points of view.  So, comments on this topic, please,  What's
> the consensus?

I believe that we need extensibility, even within the ldapACI scheme. 
That could be accomplished with the family OID or with a simple version
(LDAP ACI v1, LDAP ACI v2, ...).

-- 
Mark Smith
Directory Product Development / iPlanet E-Commerce Solutions
My words are my own, not my employer's.            Got LDAP?