The set protected-items command totally or partially denies access by public and registered users to a subtree, entry, or attributes in a subtree or entry.
For example, you might give registered users read access to the whole directory, and then specify personnel records as protected items. This makes the personnel records invisible to registered and public users.
Protected items access rules never grant an access. They specify what sorts of access are denied.
Protected items access rules take precedence over public users and registered users access level rules.
Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |