[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Extra output from ldap_search ?


On Tuesday 21 October 2003 10:44, Ace Suares wrote:
> I was wondering if it is very difficult to extend the results that
> ldap_search gives with an extra item per attribute: the access rights.
> I am building a webinterface and depending on who is logged in, some
> attributes might be read-only.
> Of course, attributes that are off-limits entirely (no access) won't even
> show up. But how do I distinguish when userA is accessing the webinterface,
> he has rights to modify, let's say, userPassword ?

Simply use in-directory ACIs and request these together with the other 
That should solve the problem. Of course you need to interpret the ACIs
in your program. 


Peter Marschall
eMail: peter@adpm.de