[Date Prev][Date Next]
(ITS#3624) [enhancement] slapacl may easily test access to a whole object
Full_Name: Pierangelo Masarati
Submission from: (NULL) (220.127.116.11)
Submitted by: ando
After the recent changes, slapacl (unless the -u "dryrun" option is given)
fetches the target entry from the database, to allow access checking by those
rules that require the contents of the target.
As such, it could easily be modified to check accss to the whole entry if no
specific set of attributes is given.