Re: ACIs and OL 2.3, rfc ?

[Howard Chu <hyc@symas.com>]

Rich Megginson wrote:
> Michael Ströder wrote:
> > Pierangelo Masarati wrote:
> >  
> > > IMHO, the most appealing feature of ACIs is the fact that in principle
> > > access rules get replicated along with data.
> > >     
> >
> > The most appealing feature to me would be that a client could in advance
> > determine what access control is in effect and modify the input forms
> > accordingly. But without a common standard there is no point in using
> > in-directory ACIs.
> >   
> Couldn't you use Get Effective Rights for that?

That would be close, maybe good enough for a GUI. But Get Effective Rights 
can't tell you about value-specific rights.

--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  Chief Architect, OpenLDAP     http://www.openldap.org/project/