[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACL control with break

On 25/5/2012 6:59 ÎÎ, Nick Milas wrote:

You mean that if we use a <what> statement without an "attrs=" clause, then it affects children and entry pseudo-attributes as well? And what if there is a filter specified too (still without an "attrs=" clause)?

From some research I did (e.g.: http://www.openldap.org/faq/data/cache/1140.html), I don't see cases of implicit change (meant as described above) of entry and children pseudo-attributes.

In case we would like an ACL statement to include all attributes *plus* the pseudo-attributes, then we should explicitly specify, for example:

access to dn.subtree="ou=people,dc=example,dc=com" attrs="@extensibleObject,children,entry"
   by dn.exact="uid=admin,ou=people,dc=example,dc=com" write

If anyone has more details on this, I would appreciate your feecback.