Hello, To be backward compatible the processing of 'moddn' aci should be disabled by default. So 'add' permission will still allow to moddn an entry under the target subtree. New 'moddn' permission in aci will be supported (aci not rejected) but not enforced during moddn.
thanks thierry https://fedorahosted.org/389/ticket/47553 https://fedorahosted.org/389/attachment/ticket/47553/0001-Ticket-47553-Enhance-ACIs-to-have-more-control-over-.4.patch
-- 389-devel mailing list 389-devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-devel