[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: "children" keyword in the field <what> of an ACL

Which "children" are you you referencing?
in the context of dn.children you are specifying that you are setting
ACLs for the children of this entry,  all children, not just direct
children, for just direct children use one.
in the context of attrs=children this is pretty much the same AFAIK.. I
use this in the setup of a private addressbook, where I give the user
permission to write to children of his entry to create the address book
you can't specify an objectClass in what.. you can specify that some dn
can read or write the objectClass attribute, but you can not specify oh
only let this user edit objectClasses of this type.

On Thu, 2003-09-04 at 09:23, François Beretti wrote:
> hello all
> I am not sure to understand the meaning of the "children" keyword in the
> field <what> of an ACL
> 1) first, is this word talking about direct children, or any entry in the
> subtree ?
> 2) then, if I specify an objectclass name with this keyword, will the target
> only be the children implementing the specified objectclass ? or will it be
> the children of any entry of a such objectclass ?
> thank you very much
> Francois Beretti
> ____________
> Virus checked by G DATA AntiVirusKit
> Version: AVK 12.0.547 from 27.08.2003
> Virus news: www.antiviruslab.com
Edward Rudd <eddie@omegaware.com>
Home Page <http://urkle.drip.ws/>

Attachment: signature.asc
Description: This is a digitally signed message part