All,
Here is the goal I am trying to accomplish:
I am trying to create an administrative user that has access to the 389 Management Console
that has access to a single OU and can only modify objects within that OU. This user
should not be able to modify anything outside of this OU, nothing in netscaperoot, nothing
under schema, monitor or Config, and shouldn't be able to do anything on the
Configuration or Tasks tab.
If this is not possible then that's fine, I just need to know either way, so far I
have been messing with ACIs and targetfilters etc... trying to get something working and
I'm not having much success, any help with this is greatly appreciated.
Regards,
Daniel Bright