Attachment 717257 Details for Bug 923504 – ACI's needed to reproduce the issue

ACI's needed to reproduce the issue

acis.ldif (text/x-ldif), 3.96 KB, created by mreynolds on 2013-03-27 19:57:10 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: mreynolds

Created: 2013-03-27 19:57:10 UTC

Size: 3.96 KB

patch

obsolete

>dn: ou=oneview,ou=mmo,dc=example,dc=com
>changetype: modify
>add: aci
>aci: (target="ldap:///ou=*,($dn),ou=oneview,ou=mmo,dc=example,dc=com")(targetatt
> r= "*")( version 3.0; acl "read node globalcontacts and subscriber"; allow (r
> ead, search, compare)userdn= "ldap:///uid=*,ou=subscriber,($dn),ou=oneview,ou
> =mmo,dc=example,dc=com" ;)
>aci: (target="ldap:///($dn),ou=oneview,ou=mmo,dc=example,dc=com")(targetattr= "*
> ")( version 3.0; acl "read node customer"; allow (read, search, compare)userd
> n= "ldap:///uid=*,ou=subscriber,($dn),ou=oneview,ou=mmo,dc=example,dc=com" ;)
>aci: (target="ldap:///uid=*,uid=($dn),ou=oneview,ou=mmo,dc=example,dc=com")(targ
> etattr= "*")( version 3.0; acl "read own private contacts"; allow (read, sear
> ch, compare)userdn= "ldap:///uid=($dn),ou=oneview,ou=mmo,dc=example,dc=com" ;)
>aci: (target="ldap:///uid=*,ou=globalcontacts,ou=($dn),ou=oneview,ou=mmo,dc=example,
> dc=com")(targetattr= "*")( version 3.0; acl "read global contacts"; allow
>  (read, search, compare)userdn= "ldap:///uid=*,ou=subscriber,ou=($dn),ou=onev
> iew,ou=mmo,dc=example,dc=com" ;)
>aci: (target="ldap:///uid=*,ou=subscriber,ou=($dn),ou=oneview,ou=mmo,dc=example,
> dc=com")(targetattr= "*")( version 3.0; acl "read other subscriber"; allow (r
> ead, search, compare)userdn= "ldap:///uid=*,ou=subscriber,ou=($dn),ou=oneview
> ,ou=mmo,dc=example,dc=com" ;)
>aci: (targetattr = "userPassword")( version 3.0; acl "deny read password of ot
> hers"; deny (read, search, compare)userdn != "ldap:///self" ;)
>aci: (target="ldap:///ou=*,ou=oneview,ou=mmo,dc=example,dc=com")(targetattr="sho
> rtCode")( version 3.0; acl "deny shortCode of other location"; deny (read, se
> arch, compare) userattr != "loc";)
>
>dn: uid=sub-9999,ou=subscriber,ou=customer2,ou=oneview,ou=mmo,dc=example,dc=com
>changetype: modify
>add: aci
>aci: (target="ldap:///uid=*,ou=Subscriber,ou=customer2,ou=oneview,ou=mmo,
> dc=example,dc=com")(targetattr= "shortCode")( version 3.0; acl "deny read shortCode 
> of other locations"; deny (read, search, compare) userattr != "loc#1111";)
>aci: (target="ldap:///uid=*,ou=Subscriber,ou=customer2,ou=oneview,ou=mmo,
> dc=example,dc=com")(targetattr = "groupShortCode")( version 3.0; acl "deny read grou
> pShortCode of own locations"; deny (read, search, compare) userattr = "loc#11
> 11";)
>
>dn: uid=sub-4781,ou=subscriber,ou=customer1,ou=oneview,ou=mmo,dc=example,dc=com
>changetype: modify
>add: aci
>aci: (target="ldap:///uid=*,ou=Subscriber,ou=customer1,ou=oneview,ou=mmo,
> dc=example,dc=com")(targetattr= "shortCode")( version 3.0; acl "deny read shortCode 
> of other locations"; deny (read, search, compare) userattr != "loc#2428";)
>aci: (target="ldap:///uid=*,ou=Subscriber,ou=customer1,ou=oneview,ou=mmo,
> dc=example,dc=com")(targetattr = "groupShortCode")( version 3.0; acl "deny read grou
> pShortCode of own locations"; deny (read, search, compare) userattr = "loc#24
> 28";)
>
>dn: uid=sub-4780,ou=subscriber,ou=customer1,ou=oneview,ou=mmo,dc=example,dc=com
>changetype: modify
>add: aci
>aci: (target="ldap:///uid=*,ou=Subscriber,ou=customer1,ou=oneview,ou=mmo,
> dc=example,dc=com")(targetattr= "shortCode")( version 3.0; acl "deny read shortCode 
> of other locations"; deny (read, search, compare) userattr != "loc#2428";)
>aci: (target="ldap:///uid=*,ou=Subscriber,ou=customer1,ou=oneview,ou=mmo,
> dc=example,dc=com")(targetattr = "groupShortCode")( version 3.0; acl "deny read grou
> pShortCode of own locations"; deny (read, search, compare) userattr = "loc#24
> 28";)
>
>dn: uid=sub-4782,ou=subscriber,ou=customer1,ou=oneview,ou=mmo,dc=example,dc=com
>changetype: modify
>add: aci
>aci: (target="ldap:///uid=*,ou=Subscriber,ou=customer1,ou=oneview,ou=mmo,
> dc=example,dc=com")(targetattr= "shortCode")( version 3.0; acl "deny read shortCode 
> of other locations"; deny (read, search, compare) userattr != "loc#2222";)
>aci: (target="ldap:///uid=*,ou=Subscriber,ou=customer1,ou=oneview,ou=mmo,
> dc=example,dc=com")(targetattr = "groupShortCode")( version 3.0; acl "deny read grou
> pShortCode of own locations"; deny (read, search, compare) userattr = "loc#22
> 22";)

Actions: View

Attachments on bug 923504: 717254 | 717255 | 717257