On 02/24/2014 09:00 AM, thierry bordaz wrote:
Hello,
IPA team filled this ticket
https://fedorahosted.org/389/ticket/47553.
It requires an ACI improvement so that during a MODDN a given user is
only allowed to move an entry from one specified part of the DIT to an
other specified part of the DIT. This without the need to grant the
ADD permission.
Here is the design of what could be implemented to support this need
http://port389.org/wiki/Access_control_on_trees_specified_in_MODDN_operation
regards
thierry
Hi Thierry,
It's not urgent, but could you add a note on the get effective right
updates to the design doc?
Thanks,
--noriko