Re: access control, groups/organizationalRole

Frederik Bosch frederik.bosch@gmail.com writes:

That's not what I mean, but thanks for your suggestion.

Let me try to rephrase. Suppose I have an organizationalRole located in Amsterdam and Rotterdam. Now I only want to assign rights to all occupants of the organizationalRole located in Amsterdam.

In xpath-like syntax, this would look like this.

access to * by group/organizationalRole[@location="Amsterdam"]/roleOccupant read

How do I need to rewrite this for slapd?

You may have a look at access control by sets. http://www.openldap.org/faq/data/cache/1133.html

-Dieter