How to express an access controle clause

[Michael Parienti <mparienti@easter-eggs.com>]

Hi

I have a question about expressing an access control clause.

In my directory, I have two branches:
- people
- administratives structures

People are all on the same level, children of an entry which
looks like "ou=People,dc=mydomain,dc=org". People entries have
an attribute, "adminattach", which contains the dn of the
administrative structure, on which they depend.

Administratives structures are hierarchically
organizied. Administratives structures have an attribute,
"responsable", which contains the dn of the responsable of the
administrative structure.

The question is: how to espressed, in the ACL syntax, that
every people entry can be modified by the people responsable
of the administrative structure on which they depend?

Who: People
What: attribute "responsable" of the entry contained in the
      "adminattach" attribute the "who" entry.

Help is welcome!


Michaël P.