[#DIRSERVER-438] Make updates to groups modify ACIItems in all kinds of ACI

Directory ApacheDS

Make updates to groups modify ACIItems in all kinds of ACI

Created: 07/Nov/05 09:56 PM Updated: 09/Jul/08 11:45 AM

Return to search

Component/s:

core

Affects Version/s:

None

Fix Version/s:

2.5.0

Time Tracking:

Not Specified

Issue Links:

Dependants

This issue blocks:

DIRTSEC-3 Renaming an application doesn't rename its adminGroup and adminACI

Description

« Hide

Right now when an ACIItem is present to grant or deny based on groupMembership nothing happens when the group is renamed. Ideally it would be nice if the ACIItems based on the userGroup UserClass were updated to reflect the change. Right now if you rename a group without changing ACIItems based on it the effectiveness of the ACI and the group are lost. The group and the ACIItems that depend on it must be changed together.

All

Comments

Work Log

Change History

Subversion Commits

Sort Order:

[ Permlink | « Hide ]

Ersin Er added a comment - 17/Jul/06 05:56 AM

This is a referential integrity issue and can be addressed by using ldap triggers.

[ Permlink | « Hide ]

Alex Karasulu added a comment - 08/Aug/06 03:37 AM

Ersin perhaps you can have a look at this problem in the future since you're working on triggers in the 1.1 branch.

[ Permlink | « Hide ]

Emmanuel Lecharny added a comment - 09/Jul/08 11:45 AM

I don't think we will be able to work on that for 2.0.