Administration Guide › Set Up Access Controls › How Access Controls Work

How Access Controls Work

Before performing any type of operation, an access control asks the following question:

• Is this client permitted to perform this operation, on this data, in this subtree, at this time?

  Where:

  • A client is a user, a role, a group of users, or a subtree of users
  • An operation is one of the usual directory services, including compare, list, search, read, add, remove, modify, or modify-dn
  • The data can be an entry or attribute
  • A subtree is a particular area of the namespace
  • The time is a particular minute of the day or a particular day of the week

When the answer to this question is yes, the operation can proceed. When the answer is no, the operation is refused.

For information about how aliases work with access controls, see Access Controls and Aliases.