Re: access control help

[Peter Lüders <pe7@gmx.de>]

many many thanks !!! now it works. im very glad :)

cheers
p.lüders


Tiefnig Daniel wrote:

> David Olivier some time wrote:
>  >> access to attr=userPassword
>  >> by self write
>  >> by anonymous auth
>  >> by dn="cn=Admin,dc=orderrace,dc=com" write
>  >> by * none
>  >> access to dn.regex=".*,cn=(.*),dc=orderrace,dc=com"
>  >> by dn.regex=".*,cn=$1,dc=orderrace,dc=com" write
>  >> by * none
>
> i guess, your user will have a problem here reading it's own entry.
> (when specifying '.*,cn=(.*)') try to leave the ',' away in the regex
> and you should get access to the entry itself too, not only the subtree:
>
> access to dn.regex=".*cn=(.*),dc=orderrace,dc=com"
>    by dn.regex="cn=$1,dc=orderrace,dc=com" write
>    by * none
>
> this gives your 'cn=<something>,dc=orderrace,dc=com'-users write access
> to "their" subtree. if you want to allow subtree entries also to write
> the subtree, add a '.*' in front of the second dn.regex too.
>
> not sure wether this works, but it looks logical to me..
>
> daniel
>

--
(((http://jzone.de)))