AM Miscellaneous

-------------------------------------------------------------------------------------------------------------

#
#
# discard
#
aci:
(target=”ldap:///$rootSuffix”)
(targetattr!=”nsroledn”)
(version 3.0; acl “S1IS Group admin’s right to the users he creates”;
allow (all)
userattr = “iplanet-am-modifiable-by#ROLEDN”;)

Action: Discard.

Discarding this ACI disables the associated privileges to the attribute iplanet-am-modifiable-by.

-------------------------------------------------------------------------------------------------------------