clearly indicate what the default rules are

This commit is contained in:
Pierangelo Masarati 2004-10-28 17:53:46 +00:00
parent ff8713131b
commit a9f2f12b93
2 changed files with 9 additions and 0 deletions

View File

@ -52,6 +52,11 @@ directives are defined for a backend or those which are defined are
not applicable, the directives from the global configuration section
are then used.
.LP
If no access controls are present, the default policy
allows anyone and everyone to read anything but restricts
updates to rootdn. (e.g., "access to * by * read").
The rootdn can always read and write EVERYTHING!
.LP
For entries not held in any backend (such as a root DSE), the
directives of the first backend (and any global directives) are
used.

View File

@ -79,6 +79,10 @@ actual text are shown in brackets <>.
Grant access (specified by <access>) to a set of entries and/or
attributes (specified by <what>) by one or more requestors (specified
by <who>).
If no access controls are present, the default policy
allows anyone and everyone to read anything but restricts
updates to rootdn. (e.g., "access to * by * read").
The rootdn can always read and write EVERYTHING!
See
.BR slapd.access (5)
and the "OpenLDAP's Administrator's Guide" for details.