Obtaining Effective Rights Information

The access control model provided by Directory Server 6.1 can grant access to users through many different mechanisms. However, this flexibility can make your security policy fairly complex. Several parameters can define the security context of a user, including IP address, machine name, time of day, and authentication method.

To simplify the security policy, Directory Server 6.1 enables you to request and list the effective access rights that a given user has to specified directory entries and attributes. For more information, see Viewing Effective Rights in Sun Java System Directory Server Enterprise Edition 6.1 Administration Guide.