[email protected] wrote:
> On 01/31/2014 05:49 PM, [email protected] wrote:
>> What does administrative access mean?
> 
> It allows write when write is granted and the "relax" control is 
> present.  In practice, those who have "manage" access can perform those 
> normally "prohibited" operations described in draft-zeilenga-ldap-relax.

I wish this explanation would catch all cases.

I vaguely remember that before the birth of draft-zeilenga-ldap-relax some
(overlays?) misused the Manage DSA IT control for that purpose.

Ciao, Michael.


Reply via email to