Re: Extra output from ldap_search ?

[Peter Marschall <peter@adpm.de>]

Hi,

On Tuesday 21 October 2003 10:44, Ace Suares wrote:
> I was wondering if it is very difficult to extend the results that
> ldap_search gives with an extra item per attribute: the access rights.
>
> I am building a webinterface and depending on who is logged in, some
> attributes might be read-only.
>
> Of course, attributes that are off-limits entirely (no access) won't even
> show up. But how do I distinguish when userA is accessing the webinterface,
> he has rights to modify, let's say, userPassword ?

Simply use in-directory ACIs and request these together with the other 
attributes.
That should solve the problem. Of course you need to interpret the ACIs
in your program. 

Peter

-- 
Peter Marschall
eMail: peter@adpm.de