directory-api mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From rm <>
Subject Re: aci evaluation ...
Date Wed, 22 Sep 2010 22:02:57 GMT

hi emmanuel,

thanks for your reply ... so, just to clarify ... the only 'standard' 
way to find out wether or not i can perform a certain action is to try 
it? otherwise, i'd be stuck with extended operation or with parsing 
serverimplementation- and/or configuration specific acl entries?

but the server should know! and it won't tell me? that is not a very 
polite thing to do ...

again, thanks


On 21/09/2010 23:27 , Emmanuel Lecharny wrote:
> On 9/21/10 12:38 PM, rm wrote:
>> hi,
>> i am trying to get ACI information out of an ldap server i am
>> connecting to - the gui of the application i am working on should
>> change it's state depending on wether or not a user has certain
>> permissions (actually, it is as simple as wether or not to display an
>> "add" button).
>> aside from launching an extended operation ... i should be possible to
>> get this information, right? so ... i am wondering why it's not
>> exposed in any of the APIs i looked at? the apache ldap libs have some
>> stuff in the "shared" portion, but i dont think it's a good idea to go
>> there ...
>> being able to get the current state without having to parse all aci
>> atts myself seems to be such a straightforward thing - and i can't
>> find any hints as to how to do it ... i fear the worst: that i
>> completely misunderstood some ldap concepts.
>> any help? please?
> There is nothing such as a common ACI syntax : each LDAP server uses its
> own. So this is quite normal that no API gives you the ACI information...
> However, you can grab it, if you know which server you are dealing with,
> but you will probably not be able to do anything with it unless you are
> able to evaluate this ACI.
> Sorry for that ...

View raw message