Access Control Lists

This feature enables you to manage the access control lists.

The following sections describe Access Control Lists (ACLs) and how to manage them.

Overview
Access Control Lists (ACLs) provide a means to protect information stored in an LDAP directory.
ACL type usage scenarios
Non-filter ACLs are intended to be useful in situations where the access topology of the directory calls for a homogeneous sub-tree distribution of permissions.
Access control attribute syntax
The syntaxes for the new filter-based ACL attributes are modified versions of the current non-filter-based ACL attributes.
Propagation overview
The propagation attributes aclPropagate and ownerPropagate can have a single value only within the same entry.
Access evaluation
Access for a particular operation is granted or denied based on the subject's bind DN for that operation on the target object. The processing stops as soon as access can be determined.
Working with ACLs
This feature enables you to work with ACLs.
Subtree Replication Considerations
Subtree replication provides either filter-based or non-filter based access considerations for any aclEntry and ibm-filterAclEntry attributes.

Parent topic: Directory Management