[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#3624) [enhancement] slapacl may easily test access to a whole object



Full_Name: Pierangelo Masarati
Version: HEAD
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (131.175.154.56)
Submitted by: ando


After the recent changes, slapacl (unless the -u "dryrun" option is given)
fetches the target entry from the database, to allow access checking by those
rules that require the contents of the target.

As such, it could easily be modified to check accss to the whole entry if no
specific set of attributes is given.