General Access (All Keyword); Self Access (Self Keyword); Parent Access (Parent Keyword); Ldap Urls - Netscape DIRECTORY SERVER 6.02 - ADMINISTRATOR Administrator's Manual

From the Server Console, you define anonymous access through the Access
Control Editor. See "Creating ACIs From the Console," on page 224.

General Access (all Keyword)

You can use bind rules to indicate that a permission applies to anyone who has
successfully bound to the directory; that is, all authenticated users. This allows
general access while preventing anonymous access.
From the Server Console, you define general access on the Access Control Editor.
For more information, see "Creating ACIs From the Console," on page 224.

Self Access (self Keyword)

Specifies that users are granted or denied access to their own entries. In this case,
access is granted or denied if the bind DN matches the DN of the targeted entry.
From the Server Console, you set up self access on the Access Control Editor. For
more information, see "Creating ACIs From the Console," on page 224.

Parent Access (parent Keyword)

Specifies that users are granted or denied access to the entry only if their bind DN
is the parent of the targeted entry.
You cannot set up parent access control using the Server Console.

LDAP URLs

You can dynamically target users in ACIs using a URL with a filter as follows:
userdn = "ldap:///<suffix>??sub?(filter)"
For example, all users in the accounting and engineering branches of the
tree would be granted or denied access to the targeted resource
example.com
dynamically based on the following URL:
userdn = "ldap:///dc=example,dc=com??sub?(|(ou=engineering)
(ou=accounting))"
NOTE Do not specify a hostname or port number within the LDAP URL.
LDAP URLs always apply to the local server.
For more information about LDAP URLs, see Appendix C, "LDAP URLs."
Chapter 6 Managing Access Control
Bind Rules
209