Re: access given to parent entry

["Pierangelo Masarati" <ando@sys-net.it>]

> To make it short, "by self[n] write", recycling the "self" clause, or
> "ancestor[n]", with "self" given by n=0 and "parent" given by n=1?

I think that, for symmetry, something similar should be done for the
regular "dn" type in both <what> and <who> clause, e.g. a version of
"onelevel" with a specified level:

access to dn.level[3]="dc=foo,dc=com"
    by dn.level[2]="dc=bar,dc=com" write

I recall something similar being mentioned some time ago; something of
that kind should have been discussed for ACI scope as well.

Maybe the "{n}" syntax is preferable to "[n]".

p.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497