ACL all entry attribute keyword

[Sanjay Panwar <sanjay.panwar@openwave.com>]

Question on draft-ietf-ldapext-acl-model-07.txt
-----------------------------------------------------

WRT attr options
               attr = "[all]" / "[entry]" / (attribute *("," attribute))

Is it necessary to have two different keywords to target Entry and All
attributes, since we already have separate set of permissions for entry
and attributes.

Is it not sufficient to have only one  keyword, lets call it ?[all
entry]?,  to target both entry and its attributes. Permission determines
whether it can be applied to an entry or attribute as illustrate below.

  subtreeACI: grant:o # [all entry] # role:cn=SysAdmin,o=Company
                  ; Applies to all attributes as o is attribute specific
permission
  subtreeACI: grant:d # [all entry] # role:cn=SysAdmin,o=Company
                 ; Applies to the entry as d is entry specific
permission

 With the existing scheme it is possible to define following ACIs, which
do not have any meaning.

  subtreeACI:grant:o#[entry]#role:cn=SysAdmin,o=Company
  subtreeACI:grant:d#[all]#role:cn=SysAdmin,o=Company

- Panwar