RE: Considering Attribute Subtypes during ACL evaluation

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 02:42 PM 10/9/00 +1100, Steven Legg wrote:
>The concern with this sort of inheritance is that the access controls
>may later apply to things that the access control creator was not
>aware of at the time of creation.

AND could not be aware of... (e.g. arbitrary language tags)

>If there is no inheritance there
>can be no surprises.

And no way for clients to specify language tags which are not
explicitly allowed by access controls. 

>By the way, I'm not strongly for or against
>such inheritance.

I guess I'm strong in favor of allowing an attribute type
description to be controlled by an ACI granting access to
the attribute type.  Without out such, managing access to
language tags is a real pain.

Beyond that, my feelings are less strong...

Kurt