directory-api mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Emmanuel Lecharny <>
Subject Re: aci evaluation ...
Date Tue, 21 Sep 2010 15:27:46 GMT
  On 9/21/10 12:38 PM, rm wrote:
> hi,
> i am trying to get ACI information out of an ldap server i am 
> connecting to - the gui of the application i am working on should 
> change it's state depending on wether or not a user has certain 
> permissions (actually, it is as simple as wether or not to display an 
> "add" button).
> aside from launching an extended operation ... i should be possible to 
> get this information, right? so ... i am wondering why it's not 
> exposed in any of the APIs i looked at? the apache ldap libs have some 
> stuff in the "shared" portion, but i dont think it's a good idea to go 
> there ...
> being able to get the current state without having to parse all aci 
> atts myself seems to be such a straightforward thing - and i can't 
> find any hints as to how to do it ... i fear the worst: that i 
> completely misunderstood some ldap concepts.
> any help? please?
There is nothing such as a common ACI syntax : each LDAP server uses its 
own. So this is quite normal that no API gives you the ACI information...

However, you can grab it, if you know which server you are dealing with, 
but you will probably not be able to do anything with it unless you are 
able to evaluate this ACI.

Sorry for that ...

Emmanuel L├ęcharny

View raw message