From ed39262fa647434d4a0e31f07754a263ce2b16e3 Mon Sep 17 00:00:00 2001 From: neil_a_wilson <neil_a_wilson@localhost> Date: Fri, 09 Feb 2007 21:51:09 +0000 Subject: [PATCH] Add an initial set of privilege support to OpenDS. The current privileges are currently defined and implemented: * config-read (allow reading the configuration) * config-write (allow updating the configuration) * ldif-import (allow invoking LDIF import tasks) * ldif-export (allow invoking LDIF export tasks) * backend-backup (allow invoking backup tasks) * backend-restore (allow invoking restore tasks) * server-shutdown (allow invoking server shutdown tasks) * server-restart (allow invoking server restart tasks) * server-restart (allow invoking server restart tasks) * password-reset (allow resetting user passwords) * update-schema (allow updating the server schema) * privilege-change (allow changing the set of privileges for a user) --- opends/resource/config/config.ldif | 18 +++++++++++++++++- 1 files changed, 17 insertions(+), 1 deletions(-) diff --git a/opends/resource/config/config.ldif b/opends/resource/config/config.ldif index 2c730b0..d74958c 100644 --- a/opends/resource/config/config.ldif +++ b/opends/resource/config/config.ldif @@ -1028,8 +1028,24 @@ dn: cn=Root DNs,cn=config objectClass: top -objectClass: ds-cfg-branch +objectClass: ds-cfg-root-dn-base cn: Root DNs +ds-cfg-default-root-privilege-name: bypass-acl +ds-cfg-default-root-privilege-name: modify-acl +ds-cfg-default-root-privilege-name: config-read +ds-cfg-default-root-privilege-name: config-write +ds-cfg-default-root-privilege-name: ldif-import +ds-cfg-default-root-privilege-name: ldif-export +ds-cfg-default-root-privilege-name: backend-backup +ds-cfg-default-root-privilege-name: backend-restore +ds-cfg-default-root-privilege-name: server-shutdown +ds-cfg-default-root-privilege-name: server-restart +ds-cfg-default-root-privilege-name: disconnect-client +ds-cfg-default-root-privilege-name: cancel-request +ds-cfg-default-root-privilege-name: search-unindexed +ds-cfg-default-root-privilege-name: password-reset +ds-cfg-default-root-privilege-name: update-schema +ds-cfg-default-root-privilege-name: privilege-change dn: cn=Directory Manager,cn=Root DNs,cn=config objectClass: top -- Gitblit v1.10.0