Re: Subordinate ACL question

[Luke Howard <lukeh@padl.com>]

>> Actually, I wonder if I could get away with just putting
>> "by * break" at the end of each special-case rule, which
>> would fall through to the "access to *" at the end.
>
>That's actually what I've done... I have a 400+ long ACL file with lots of 
>by * break. :P

It seems that this addresses my main concern (repeating default subjects
just to give a specific subject additional access).

So know I have something like (again contrived):

access to attrs=favouriteDrink
	by group/group/member.exact="CN=Drinkers" write
	by * break

access to attrs=entry,@pilotPerson
	by group/group/member.exact="CN=Pilots" write
	by * break

access to *
	by group/group/member.exact="CN=Administrators" write
	by dn.exact="CN=Administrator" write
	by users read
	by anonymous sockurl=ldapi:// read
	by * auth

-- Luke

--