From 70a7f5174201227d2ed673663f54731f4d7da1ed Mon Sep 17 00:00:00 2001 From: Howard Chu Date: Thu, 18 Feb 2021 13:23:47 +0000 Subject: [PATCH] ITS#7795 more detail for "manage" priv --- doc/man/man5/slapd.access.5 | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/man/man5/slapd.access.5 b/doc/man/man5/slapd.access.5 index 3f1b2867f6..bd5d9352a3 100644 --- a/doc/man/man5/slapd.access.5 +++ b/doc/man/man5/slapd.access.5 @@ -796,7 +796,11 @@ and .BR manage . Each access level implies all the preceding ones, thus .B manage -grants all access including administrative access. +grants all access including administrative access. This access +allows some modifications which would otherwise be prohibited by the +LDAP data model or the directory schema, e.g. changing the +structural objectclass of an entry, or modifying an operational +attribute that is defined as not user modifiable. The .BR write access is actually the combination of