mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-01-30 13:30:57 +08:00
clearly indicate what the default rules are
This commit is contained in:
parent
ff8713131b
commit
a9f2f12b93
@ -52,6 +52,11 @@ directives are defined for a backend or those which are defined are
|
||||
not applicable, the directives from the global configuration section
|
||||
are then used.
|
||||
.LP
|
||||
If no access controls are present, the default policy
|
||||
allows anyone and everyone to read anything but restricts
|
||||
updates to rootdn. (e.g., "access to * by * read").
|
||||
The rootdn can always read and write EVERYTHING!
|
||||
.LP
|
||||
For entries not held in any backend (such as a root DSE), the
|
||||
directives of the first backend (and any global directives) are
|
||||
used.
|
||||
|
@ -79,6 +79,10 @@ actual text are shown in brackets <>.
|
||||
Grant access (specified by <access>) to a set of entries and/or
|
||||
attributes (specified by <what>) by one or more requestors (specified
|
||||
by <who>).
|
||||
If no access controls are present, the default policy
|
||||
allows anyone and everyone to read anything but restricts
|
||||
updates to rootdn. (e.g., "access to * by * read").
|
||||
The rootdn can always read and write EVERYTHING!
|
||||
See
|
||||
.BR slapd.access (5)
|
||||
and the "OpenLDAP's Administrator's Guide" for details.
|
||||
|
Loading…
Reference in New Issue
Block a user