Hello, First of all, congratulations, I think modify ACL in runtime within reload all daemon configuration is a big HIT. For other hand, I applied ipabuser cal with keymap managing it with socat and it works fine, but it is NOT permanent when daemon is restarted.
it could be an option for this but i'm not sure, do you know it? Furthermore, I'm interesting in dynamic ACL, what's this? Could you explain more? Thanks in advance, Marc