Re: [389-devel] Design review: Access control on entries specified in MODDN operation (ticket 47553)

Noriko Hosoi <nhosoi@xxxxxxxxxx> · Wed, 26 Feb 2014 13:05:28 -0800



      On 02/24/2014 09:00 AM, thierry
        bordaz wrote:

      
      Hello,

        
       IPA team
        filled this ticket https://fedorahosted.org/389/ticket/47553.

        
        It requires an ACI improvement so that during a MODDN a given
        user is only allowed to move an entry from one specified part of
        the DIT to an other specified part of the DIT. This without the
        need to grant the ADD permission.

        
        Here is the design of what could be implemented to support this
        need http://port389.org/wiki/Access_control_on_trees_specified_in_MODDN_operation

        
        regards

        thierry
    

    Hi Thierry,

    
    It's not urgent, but could you add a note on the get effective right
    updates to the design doc?

    Thanks,

    --noriko

  
--
389-devel mailing list
389-devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-devel