Which "children" are you you referencing? in the context of dn.children you are specifying that you are setting ACLs for the children of this entry, all children, not just direct children, for just direct children use one. in the context of attrs=children this is pretty much the same AFAIK.. I use this in the setup of a private addressbook, where I give the user permission to write to children of his entry to create the address book entries. you can't specify an objectClass in what.. you can specify that some dn can read or write the objectClass attribute, but you can not specify oh only let this user edit objectClasses of this type. On Thu, 2003-09-04 at 09:23, François Beretti wrote: > hello all > > I am not sure to understand the meaning of the "children" keyword in the > field <what> of an ACL > > 1) first, is this word talking about direct children, or any entry in the > subtree ? > > 2) then, if I specify an objectclass name with this keyword, will the target > only be the children implementing the specified objectclass ? or will it be > the children of any entry of a such objectclass ? > > thank you very much > > Francois Beretti > > > ____________ > Virus checked by G DATA AntiVirusKit > Version: AVK 12.0.547 from 27.08.2003 > Virus news: www.antiviruslab.com > -- Edward Rudd <eddie@omegaware.com> Home Page <http://urkle.drip.ws/>
Attachment:
signature.asc
Description: This is a digitally signed message part