privilege

The directory server provides a privilege subsystem, which can be used to define capabilities that will be granted to users. The privilege subsystem works in conjunction with the access control implementation in the process of determining whether a user will be allowed to perform a certain operation.

Some of the privileges defined in the directory server include:

bypass-acl

Allows the user to bypass access control evaluation

modify-acl

Allows the user to modify access control rule defined in the server.

config-read

Allows the user to have read access to the server configuration

config-write

Allows the user to have write access to the server configuration

server-shutdown

Allows the user to request that the server shut down

server-restart

Allows the user to request that the server perform an in-core restart

proxied-auth

Allows the user to request an operation with a different authorization ID

unindexed-search

Allows the user to request an unindexed search

password-reset

Allows the user to password reset for other users

update-schema

Allows the user to update the server schema

See Chapter 7, Directory Server Root Users and the Privilege Subsystem, in Sun OpenDS Standard Edition 2.2 Architectural Reference for more information on the privilege subsystem.