Aci "Delete Group - Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual

Access Control Usage Examples
In the Hosts tab, click Add to display the Add Host Filter dialog box. In the
6.
DNS host filter field, type
box.
To create the value-based filter that will allow employees to add only group
7.
entries to this subtree, switch to manual editing by clicking the Edit Manually
button. Add the following to the beginning of the LDIF statement:
The LDIF statement should read as follows:
Click OK.
8.
The new ACI is added to the ones listed in the Access Control Manager
window.

ACI "Delete Group"

In LDIF, to grant
entry which they own under the
the following statement:
aci: (target="ou=social committee,dc=example,dc=com)
(targattrfilters="del=objectClass:(objectClass=groupOfNames)")
(version 3.0; acl "Delete Group"; allow (delete) userattr=
"owner#GROUPDN";)
This example assumes that the
dc=example,dc=com
Using the Console is not an effective way of creating this ACI because you would
have to use manual editing mode to create the target filter and to check group
ownership.
254 Red Hat Directory Server Administrator's Guide • May 2005
(targattrfilters="add=objectClass:(objectClass=groupOfNames)"
)
(targattrfilters="add=objectClass:(objectClass=groupOfNames)
") (targetattr = "*") (target="ldap:///ou=social
committee,dc=example,dc=com) (version 3.0; acl "Create
Group"; allow (read,search,add) (userdn= "ldap:///all") and
(dns="*.example.com"); )
example.com
entry.
. Click OK to dismiss the dialog
*.example.com
employees the right to modify or delete a group
ou=Social Comittee
is added to the
aci ou=social committee,
branch, you would write