Re: Groups under ldap

[Michael Ströder <michael@stroeder.com>]

John Lederer wrote:
> 
> We are working on a contacts directory using LDAP. 
> (http://rolodap.sourceforge.net )

I already saw this project. Hmm, you're inventing new LDAP schema.
IMHO that's a pretty bad idea.

> Here is the problem.  We want to allow a user to be able to switch from 
> seeing "all company contacts" to seeing just "my contacts" or "George's 
> contacts".

Put "my contacts" in a sub-tree for each user. This makes it easier
to design appropriate ACLs on the server. Switching to "my contacts"
is then also very easy: Just change the base-DN.

Ciao, Michael.