Access control information

Access control information specifically defines a permission of a subject to perform against certain LDAP objects.

Non-filtered ACLs
Non-filtered ACLs apply explicitly to the directory entry that contains them but can be propagated to none or all of its descendant entries.
Filtered ACLs
Filtered ACLs differ in that they employ a filter-based comparison by using a specified object filter to match target objects with the effective access that apply to them.

Parent topic: Overview