Perl 6 - the future is here, just unevenly distributed

IRC log for #openam, 2016-10-17

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
01:48 ilbot3 joined #openam
01:48 Topic for #openam is now Chat about the OpenAM project - https://backstage.forgerock.com/#/downloads - OpenAM 13.5.0 is out! OpenAM 12.0.3 is out! Channel logs at: http://irclog.perlgeek.de/openam/today
07:02 aldaris joined #openam
08:30 KermitTheFragger joined #openam
10:32 aldaris joined #openam
11:46 abyss_ aldaris: I'd like to add user to opendj who can remove people tree but nothing more. So as I read documentation I should create such a user in: uid=Admin,cn=Administrators,ou=People,dc=example,dc=com - ok, but when someone will try to remove tree people will remove admin user as well;)
11:46 abyss_ Could I add the same user in Admin,cn=Administrators,dc=example,dc=com ?
11:48 abyss_ uid=Admin
11:52 aldaris you can put it anywhere you'd like
11:58 abyss_ aldaris: so from where that user will know that he can only delete ou=People,dc=example,dc=com tree? I know maybe stupid question but I can't see any parameters where I can set which tree he could modify/delete
12:16 abyss_ aldaris: ok, I probably slowly get it;) I have two mechanisms access control instructions and administrative privileges. Administrative privileges whenever I create accout works for all even when I create in ou=People,dc=example,dc=com (admin will work then for dc=notexample,dc=com), yes? So if I want to do what I want I have to choose aci, right?
12:29 aldaris you need to write an ACI yes
12:47 aldaris joined #openam
13:49 aldaris joined #openam
14:07 abyss_ aldaris: yeah, thank you.
14:41 aldaris1 joined #openam
14:45 MegaMatt joined #openam
15:18 aldaris joined #openam
15:40 aldaris joined #openam
18:12 KermitTheFragger joined #openam
21:32 MegaMatt joined #openam

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary