Thanks to all your feedbacks, they helped me a lot and raised a severe
limitation in the original design.
I updated the design following the aci syntax proposed during the
On the implementation side, it is a bit more complex but less than I
expected. I have not yet investigated the impact of ger operations.
I think a big work will be the test side as the ACI syntax provides many
Note: I kept for the moment the original design in 'alternative no1'.
Freeipa-devel mailing list