| | |
| | | package="org.opends.server.admin.std" extends="access-control-handler" |
| | | xmlns:adm="http://www.opends.org/admin" |
| | | xmlns:ldap="http://www.opends.org/admin-ldap"> |
| | | |
| | | <adm:synopsis> |
| | | The |
| | | <adm:user-friendly-name /> |
| | | is the provider class for the dseecompt ACI. |
| | | </adm:synopsis> |
| | | |
| | | <adm:profile name="ldap"> |
| | | <ldap:object-class> |
| | | <ldap:oid>1.3.6.1.4.1.26027.1.2.87</ldap:oid> |
| | |
| | | <ldap:superior>ds-cfg-access-control-handler</ldap:superior> |
| | | </ldap:object-class> |
| | | </adm:profile> |
| | | |
| | | <adm:property-override name="acl-handler-class"> |
| | | <adm:default-behavior> |
| | | <adm:defined> |
| | |
| | | </adm:defined> |
| | | </adm:default-behavior> |
| | | </adm:property-override> |
| | | |
| | | <adm:property name="global-aci" mandatory="false" |
| | | multi-valued="true"> |
| | | <adm:synopsis> |
| | | Defines a global access control rule, which will always be interpreted for |
| | | any entry anywhere in the server (although it may be overridden by more |
| | | specific access control rules placed in the data). |
| | | </adm:synopsis> |
| | | <adm:description> |
| | | </adm:description> |
| | | <adm:default-behavior> |
| | | <adm:alias> |
| | | <adm:synopsis> |
| | | Defines a global access control rule, which will always be |
| | | interpreted for any entry anywhere in the server (although it |
| | | may be overridden by more specific access control rules placed |
| | | in the data). |
| | | No global ACIs will be defined, which means that no access will be |
| | | allowed for any data in the server unless granted by access control |
| | | rules in the user data. |
| | | </adm:synopsis> |
| | | </adm:alias> |
| | | </adm:default-behavior> |