Marco Gaiarin disse:
> Mi pare chiaro che le stanze vengono elaborate in base al <what>, e il
> primo match fa fede, ma mi pare strano che non esista un meccanismo di
> override.
>
> Tutto qui.
allora vuol dire che non hai letto bene. man slapd.access:
THE <CONTROL> FIELD
The optional field <control> controls the flow of access rule
application. It can have the forms
stop
continue
break
where stop, the default, means access checking stops in case
of match. The other two forms are used to keep on processing
access
clauses. In detail, the continue form allows for other <who>
clauses in the same <access> clause to be considered, so that they
may
result in incrementally altering the privileges, while the break
form allows for other <access> clauses that match the same target
to
be processed.
Ing. Luca Scamoni
Responsabile Ricerca e Sviluppo
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 0382 573859 (137)
Mobile: +39 347 1014425
Email: [EMAIL PROTECTED]
-----------------------------------
_______________________________________________
OpenLDAP mailing list
[email protected]
https://www.sys-net.it/mailman/listinfo/openldap
