Re: (ITS#7795) "manage" access right needs better description

[quanah@zimbra.com]

--On Friday, January 31, 2014 6:08 PM +0100 Pierangelo Masarati 
<pierangelo.masarati@polimi.it> wrote:

> On 01/31/2014 05:49 PM, quanah@OpenLDAP.org wrote:
>> Full_Name: Quanah Gibson-Mount
>> Version: 2.4.39
>> OS: Linux 2.6
>> URL: ftp://ftp.openldap.org/incoming/
>> Submission from: (NULL) (75.111.58.125)
>>
>>
>> The documentation in the Admin guide and the man pages for the "manage"
>> ACL setting has virtual no documentation.  The only definitive statement
>> is a very vague:
>>
>> " thus manage grants all access including administrative access"
>>
>> What does administrative access mean?
>
> It allows write when write is granted and the "relax" control is present.
> In practice, those who have "manage" access can perform those normally
> "prohibited" operations described in draft-zeilenga-ldap-relax.

Excellent, thank you very much. ;)

--Quanah

--

Quanah Gibson-Mount
Architect - Server
Zimbra, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration