[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACL: user who can just create but not delete entries

To: openldap-technical@openldap.org
Subject: Re: ACL: user who can just create but not delete entries
From: "Dieter Kluenter" <dieter@dkluenter.de>
Date: Thu, 21 Aug 2008 19:09:25 +0200
In-reply-to: <fb53dd1e0808210502xbc90fbcr70a3de1b79cc577@mail.gmail.com> (Stefano Zanmarchi's message of "Thu, 21 Aug 2008 14:02:09 +0200")
References: <fb53dd1e0808210502xbc90fbcr70a3de1b79cc577@mail.gmail.com>
User-agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.5-b28 (linux)

"Stefano Zanmarchi" <zanmarchi@gmail.com> writes:

> Hi,
> I'd like to create a special user ("cn=useradmin,dc=myorg,dc=com")
> whose task would be creating new entries under "ou=people,dc=myorg,dc=com".
>
> My problem is that useradmin will be used by a not completely trusted
> application.
> Can I prevent useradmin from deleting or modifying entries under
> "ou=people,dc=myorg,dc=com"?

man slapd.access(5), search for 'priv access model'.

-Dieter 

-- 
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6

References:
- ACL: user who can just create but not delete entries
  - From: "Stefano Zanmarchi" <zanmarchi@gmail.com>

Prev by Date: RE: ldapsearch - Active Directory proxyaddresses:smtp
Next by Date: Can't bind to server even though everything is running and seems normal
Index(es):
- Chronological
- Thread