mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-01-06 10:46:21 +08:00
Code Issues Packages Projects Releases Wiki Activity

clarify the required access to add the suffix of a database (consequence of ITS#4552)

Browse Source
This commit is contained in:
Pierangelo Masarati 2006-05-20 11:12:05 +00:00
parent fa2425005a
commit e5fc7845fc
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
doc/man/man5/slapd.access.5
View File

@ -860,11 +860,13 @@ as the first access rule.
As a consequence, unless the operation is performed with the As a consequence, unless the operation is performed with the
.B updatedn .B updatedn
identity, control is passed straight to the subsequent rules. identity, control is passed straight to the subsequent rules.
.SH OPERATION REQUIREMENTS .SH OPERATION REQUIREMENTS
Operations require different privileges on different portions of entries. Operations require different privileges on different portions of entries.
The following summary applies to primary database backends such as The following summary applies to primary database backends such as
the BDB and HDB backends. Requirements for other backends may the BDB and HDB backends. Requirements for other backends may
(and often do) differ. (and often do) differ.
.LP .LP
The The
.B add .B add
@ -877,6 +879,10 @@ of the entry being added, and
privileges on the pseudo-attribute privileges on the pseudo-attribute
.B children .B children
of the entry's parent. of the entry's parent.
When adding the suffix entry of a database, write access to
.B children
of the empty DN ("") is required.
.LP .LP
The The
.B bind .B bind
@ -884,12 +890,14 @@ operation, when credentials are stored in the directory, requires
.B auth (=x) .B auth (=x)
privileges on the attribute the credentials are stored in (usually privileges on the attribute the credentials are stored in (usually
.BR userPassword ). .BR userPassword ).
.LP .LP
The The
.B compare .B compare
operation requires operation requires
.B compare (=c) .B compare (=c)
privileges on the attribute that is being compared. privileges on the attribute that is being compared.
.LP .LP
The The
.B delete .B delete
@ -902,12 +910,14 @@ of the entry being deleted, and
privileges on the privileges on the
.B children .B children
pseudo-attribute of the entry's parent. pseudo-attribute of the entry's parent.
.LP .LP
The The
.B modify .B modify
operation requires operation requires
.B write (=w) .B write (=w)
privileges on the attributes being modified. privileges on the attributes being modified.
.LP .LP
The The
.B modrdn .B modrdn
@ -927,6 +937,7 @@ privileges are also required on the attributes that are present
in the old relative DN if in the old relative DN if
.B deleteoldrdn .B deleteoldrdn
is set to 1. is set to 1.
.LP .LP
The The
.B search .B search
@ -959,6 +970,7 @@ access to the attribute holding the referral information
(generally the (generally the
.B ref .B ref
attribute). attribute).
.LP .LP
Some internal operations and some Some internal operations and some
.B controls .B controls