On 02/24/2014 09:00 AM, thierry
bordaz wrote:
Hello,
IPA team
filled this ticket https://fedorahosted.org/389/ticket/47553.
It requires an ACI improvement so that during a MODDN a given
user is only allowed to move an entry from one specified part of
the DIT to an other specified part of the DIT. This without the
need to grant the ADD permission.
Here is the design of what could be implemented to support this
need http://port389.org/wiki/Access_control_on_trees_specified_in_MODDN_operation
regards
thierry