[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: pre-evaluating write ACL

To: "OpenLDAP Mailing List" <openldap@kogz.com>
Subject: Re: pre-evaluating write ACL
From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
Date: Sat, 20 Oct 2001 14:58:08 -0700
Cc: <openldap-software@OpenLDAP.org>
In-reply-to: <3F56FC4223C94F40B32C892473429C880225B7@senegal.corp.kogz.c om>

At 07:56 AM 2001-10-19, OpenLDAP Mailing List wrote:
>Is there any way to test whether an attribute COULD be modified (by the
>bound user) without actually changing any information?

OpenLDAP provides no mechanism to do this.   One could extend
OpenLDAP to provide a "don't commit" control which could
(non-conclusively) answer the question "would this operation
succeed?".  But answer does necessarily apply to any other
operation (or the same operation at another time).

> On a UI, I'd like read-only attributes to be text and writeable
> attributes to be input widgets.

Prev by Date: core dump! help!
Next by Date: Re: Problems with Kerberos SASL bind to LDAP
Index(es):
- Chronological
- Thread