[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Q: meaning of ACL "disclose" access



Ulrich Windl wrote:
> Hi!
> 
> The manual page slapd.access explains: "The disclose access level allows disclosure of information on error."
> 
> I don't quite understand what this is saying: Can the requester find out a specific object or attribute exists without actually reading its value?

Basically, yes. If you attempt an operation on an entry that doesn't have Disclose access,
you'll get a NO_SUCH_OBJECT error instead of whatever other error code might have applied.

-- 
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/