[Date Prev][Date Next] [Chronological] [Thread] [Top]

About ACL

Hello,
I have already wroten a message, but I think I couldn't 
explain my problem clearly.
I would like to define an ACL that permits to a user 
defined in a position in the tree to read only a subtree 
whose root position depends on the position of the user.
For example, if the user is 
cn=foo,ou=People,o=XYZ
he can read everywhere under
ou=People,o=XYZ
If the user is 
cn=me,ou=Something,ou=People,o=XYZ
he can read everywhere under
ou=Something,ou=People,o=XYZ
The users are added/removed by my application at runtime, 
so I would like to have the privileges been assigned to new 
users without restarting slapd. Is it possible ?

Thanks for your attention,
Ludovico Basili