[ 
http://issues.apache.org/jira/browse/DIRSERVER-617?page=comments#action_12429683
 ] 
            
Ersin Er commented on DIRSERVER-617:
------------------------------------

I think we should have Administrators group for each partition and also for the 
whole system.

To have administrators for each partition we can create a container, 
ou=Administrators, with each partition created and we can arrange ACI 
accordingly that group for that partition.

To have system wide administrators there are two choices:
1. We will add some ACI to each creaed partition for 
ou=Administrators,ou=system group.
2. We will implement mutable RootDSE or hierarchical partitions in other words.

> Add ACI for Administrators group if not already present
> -------------------------------------------------------
>
>                 Key: DIRSERVER-617
>                 URL: http://issues.apache.org/jira/browse/DIRSERVER-617
>             Project: Directory ApacheDS
>          Issue Type: Task
>          Components: ldap
>    Affects Versions: 1.0-RC1, 1.0-RC2, pre-1.0, 1.0-RC3
>            Reporter: Alex Karasulu
>             Fix For: 1.1.0, 1.0-RC4
>
>
> Add ACI to enable Administrators group to have admin user like access to 
> configure the server via the ou=system partition.  This will only work when 
> using the AuthorizationService for the X.500 basic authorization scheme as 
> opposed to the DefaultAuthorizationService   .

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to