-------------------------------------------------------------------------------------------------------------
# # # discard # aci: (target=”ldap:///$rootSuffix”) (targetattr!=”nsroledn”) (version 3.0; acl “S1IS Group admin’s right to the users he creates”; allow (all) userattr = “iplanet-am-modifiable-by#ROLEDN”;)
작업: 삭제
이 ACI를 없애면 iplanet-am-modifiable-by 속성과 관련된 권한이 비활성화됩니다.
-------------------------------------------------------------------------------------------------------------