[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: [LDAP-SOFTWARE] ACLand regex (matching self)



On 2003-02-23 03:08:23 +0000, Ace Suares wrote:
> Hi all,
> 
> Is the following assertion wrong or right ?
> 
> 
> ---
> When having the follwing ACL:
> 
> access to user=(.*),cd=example,dc=com

access to dn="user=(.*),cd=example,dc=com"

> 	by self write
> 
> the DN:
> 
> user=JohnQ,cd=example,dc=com
> 
> will NOT match the 'by' clause, and the 'by' clause must be rewritten to:

Unless "user=JohnQ,cd=example,dc=com" is being effected and there
are no previous access directives matching.

> 
> 	by dn="user=$1,cd=example,cd=com" write

This looks fine but it would have the same effect I guess.

What exactly are you trying to achive here?

Ziya.

> ---
> 
> TIA,
> Ace
>