upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-22 23:59:34 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Reminder to RTFM. Fix typo.

Browse source
This commit is contained in:
Howard Chu 2011-03-03 16:53:48 +00:00
parent e16ad51b5a
commit cfbe95dbae
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
doc/guide/admin/access-control.sdf
View file

@ -25,8 +25,9 @@ rights (i.e. auth, search, compare, read and write) on everything and anything.
As a consequence, it's useless (and results in a performance penalty) to explicitly As a consequence, it's useless (and results in a performance penalty) to explicitly
list the {{rootdn}} among the {{<by>}} clauses. list the {{rootdn}} among the {{<by>}} clauses.
The following sections will describe Access Control Lists in more details and The following sections will describe Access Control Lists in greater depth and
follow with some examples and recommendations. follow with some examples and recommendations. See {{slapd.access}}(5) for
complete details.
H2: Access Control via Static Configuration H2: Access Control via Static Configuration
@ -1322,7 +1323,7 @@ The end result is that when Jane accesses John's entry, she will be granted
write access to the specified attributes. Better yet, this will happen to any write access to the specified attributes. Better yet, this will happen to any
entry she accesses which has Mary as the manager. entry she accesses which has Mary as the manager.
This is all cool and nice, but perhaps gives to much power to secretaries. Maybe we need to further This is all cool and nice, but perhaps gives too much power to secretaries. Maybe we need to further
restrict it. For example, let's only allow executive secretaries to have this power: restrict it. For example, let's only allow executive secretaries to have this power:
> access to dn.exact="uid=john,ou=people,dc=example,dc=com" > access to dn.exact="uid=john,ou=people,dc=example,dc=com"