From 64fa74f41fbab8aaca206be769bc4d26cd604009 Mon Sep 17 00:00:00 2001 From: neil_a_wilson <neil_a_wilson@localhost> Date: Thu, 07 Jun 2007 19:38:29 +0000 Subject: [PATCH] Update the global ACI definitions to allow all users to read entryUUID. --- opends/resource/config/config.ldif | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/opends/resource/config/config.ldif b/opends/resource/config/config.ldif index 1301166..fbf92f8 100644 --- a/opends/resource/config/config.ldif +++ b/opends/resource/config/config.ldif @@ -55,7 +55,7 @@ ds-cfg-global-aci: (targetattr="*")(version 3.0; acl "Self entry modification"; allow (write) userdn="ldap:///self";) ds-cfg-global-aci: (target="ldap:///cn=schema")(targetscope="base")(targetattr="attributeTypes||dITContentRules||dITStructureRules||ldapSyntaxes||matchingRules||matchingRuleUse||nameForms||objectClasses")(version 3.0; acl "User-Visible Schema Operational Attributes"; allow (read,search,compare) userdn="ldap:///anyone";) ds-cfg-global-aci: (target="ldap:///")(targetscope="base")(targetattr="namingContexts||supportedAuthPasswordSchemes||supportedControl||supportedExtension||supportedFeatures||supportedSASLMechanisms||vendorName||vendorVersion")(version 3.0; acl "User-Visible Root DSE Operational Attributes"; allow (read,search,compare) userdn="ldap:///anyone";) -ds-cfg-global-aci: (targetattr="createTimestamp||creatorsName||modifiersName||modifyTimestamp||entryDN||subschemaSubentry")(version 3.0; acl "User-Visible Operational Attributes"; allow (read,search,compare) userdn="ldap:///anyone";) +ds-cfg-global-aci: (targetattr="createTimestamp||creatorsName||modifiersName||modifyTimestamp||entryDN||entryUUID||subschemaSubentry")(version 3.0; acl "User-Visible Operational Attributes"; allow (read,search,compare) userdn="ldap:///anyone";) cn: Access Control Handler ds-cfg-acl-handler-class: org.opends.server.authorization.dseecompat.AciProvider ds-cfg-acl-handler-enabled: true -- Gitblit v1.10.0