DSEE Compatible Access Control Handler

The DSEE Compatible Access Control Handler provides an implementation that uses syntax compatible with the Sun Java System Directory Server Enterprise Edition access control handlers.

Parent

The DSEE Compatible Access Control Handler object inherits from Access Control Handler.

Properties

Use the --advanced option to access advanced properties.

Basic Properties

Advanced Properties

Basic Properties

enabled

SynopsisIndicates whether the Access Control Handler is enabled. If set to FALSE, then no access control is enforced, and any client (including unauthenticated or anonymous clients) could be allowed to perform any operation if not subject to other restrictions, such as those enforced by the privilege subsystem.
Default ValueNone
Allowed Valuestrue
false
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

global-aci

SynopsisDefines global access control rules.
DescriptionGlobal access control rules apply to all entries anywhere in the data managed by the OpenDJ directory server. The global access control rules may be overridden by more specific access control rules placed in the data.
Default ValueNo global access control rules are defined, which means that no access is allowed for any data in the server unless specifically granted by access control rules in the data.
Allowed ValuesAn access control instruction (ACI).
Multi-valuedYes
RequiredNo
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

Advanced Properties

java-class

SynopsisSpecifies the fully-qualified name of the Java class that provides the DSEE Compatible Access Control Handler implementation.
Default Valueorg.opends.server.authorization.dseecompat.AciHandler
Allowed ValuesA Java class that extends or implements:
org.opends.server.api.AccessControlHandler
Multi-valuedNo
RequiredYes
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedYes
Read-OnlyNo