Is it possible to create an RBAC rule that includes a userattr filter?
For example, we added a cn=mailinglists and each mailing list has an `owner` attribute. We
created a rule to allow anonymous reads in this subtree through RBAC.
I know we can create an ACI that would allow the owner to modify the list members:
(targetattr = "mgrpRFC822MailMember")(target =
"ldap:///cn=*,cn=aliases,dc=example,dc=com")(version 3.0;acl "Owner Change
Aliases";allow (add,delete,write) userattr = "owner#USERDN";)
Is there any way to create this ACI (or something that would do the same thing) through
the RBAC system?
Show replies by thread