Re: (ITS#7795) "manage" access right needs better description

[michael@stroeder.com]

pierangelo.masarati@polimi.it wrote:
> On 01/31/2014 05:49 PM, quanah@OpenLDAP.org wrote:
>> What does administrative access mean?
> 
> It allows write when write is granted and the "relax" control is 
> present.  In practice, those who have "manage" access can perform those 
> normally "prohibited" operations described in draft-zeilenga-ldap-relax.

I wish this explanation would catch all cases.

I vaguely remember that before the birth of draft-zeilenga-ldap-relax some
(overlays?) misused the Manage DSA IT control for that purpose.

Ciao, Michael.