[Date Prev][Date Next]
Re: (ITS#7795) "manage" access right needs better description
> On 01/31/2014 06:44 PM, firstname.lastname@example.org wrote:
>> email@example.com wrote:
>>> On 01/31/2014 05:49 PM, quanah@OpenLDAP.org wrote:
>>>> What does administrative access mean?
>>> It allows write when write is granted and the "relax" control is
>>> present. In practice, those who have "manage" access can perform those
>>> normally "prohibited" operations described in draft-zeilenga-ldap-relax.
>> I wish this explanation would catch all cases.
>> I vaguely remember that before the birth of draft-zeilenga-ldap-relax some
>> (overlays?) misused the Manage DSA IT control for that purpose.
> "manageDIT" was renamed to "relax" because it was too similar to
Yes, I know. I meant it literally mentioning "Manage DSA IT control".