[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: deleting ACL

> Alejandra Moreno wrote...:
> > but this way you don't distinguish between writing and deleting!
> please _read_ my answers.

Maybe she means to distinguish between ADDING/DELETING and MODIFYING
an attribute instead of an entry.  Alejandra should clarify her needs.

Daniel's answer is definitely correct, i.e. modify access to an entry
can be given without giving add/delete permission; however modify
access to an entry implies the ability to add and delete single 
attributes (according to schema issues, of course).  I think there's
no way to separate add/delete from modify permissions at the attribute