Advertisement
Guest User

acl.conf

a guest
Jan 31st, 2011
88
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.40 KB | None | 0 0
  1. access to dn.sub="ou=Group,dc=example,dc=com"
  2. by users read break
  3.  
  4. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=member
  5. by group.expand="$1" self+z
  6. by group/UDBgrp/UDBgrpInvited.expand="$1" self+a
  7. by group/UDBgrp/UDBgrpAdmin.expand="$1" +z
  8. by group/UDBgrp/UDBgrpSuspended.expand="$1" self+a
  9. by users read
  10.  
  11. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=UDBgrpInvited
  12. by group/UDBgrp/UDBgrpInvited.expand="$1" self+z
  13. by group/UDBgrp/UDBgrpAdmin.expand="$1" +az
  14. by users read
  15.  
  16. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=UDBgrpSuspended
  17. by group.expand="$1" self+a
  18. by group/UDBgrp/UDBgrpSuspended.expand="$1" self+z
  19. by group/UDBgrp/UDBgrpAdmin.expand="$1" +z
  20. by users read
  21.  
  22. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=UDBgrpAdmin
  23. by group/UDBgrp/UDBgrpAdmin.expand="$1" write
  24. by users read
  25.  
  26. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=description
  27. by group/UDBgrp/UDBgrpAdmin.expand="$1" write
  28. by users read
  29.  
  30. access to dn.exact="ou=Group,dc=example,dc=com" attrs=children
  31. by users write
  32.  
  33. # The 'filter' prevents the creation of any non-group objects
  34. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=entry filter="(&(objectClass=groupOfNames)(objectClass=UDBgrp))"
  35. by group/UDBgrp/UDBgrpAdmin.expand="$1" write
  36. by users add
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement