<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
it is always difficult to talk about a single aci since access is
controlled by applying all exxising acis, and one aci can prevent
the effect of another one.<br>
Also you're talking about hiding entries, but the aci you propose is
about allowwing access, so making entries visible to the group.<br>
<br>
Could you provide more info on the tree and entries you have and
whoc should be able to do what. What do you mean by "only certain
people" ?<br>
Did you try some acis and it didn't work ? <br>
<br>
Regards,<br>
Ludwig<br>
<br>
<div class="moz-cite-prefix">On 01/31/2013 12:35 PM, rayane karim
wrote:<br>
</div>
<blockquote
cite="mid:CAOD8qnfEAfLoPWQZVm85rkjv-Pvcka0dH7p20YZ1wyxQBWxNbA@mail.gmail.com"
type="cite">
<div dir="ltr">Hi
<div> need to setup an acl restriction based on targetfilter
like </div>
<div><br>
</div>
<div>(targetattr = "*") (targetfilter=
"(!(Affectation=testaff))") (version 3.0;acl "Student
restriction Acl";allow (write)(groupdn = <a class="moz-txt-link-rfc2396E" href="ldap:///cn=StudentsManager,ou=Groups,dc=example,dc=com">"ldap:///cn=Students
Manager,ou=Groups,dc=example,dc=com"</a>);)</div>
<div><br>
</div>
<div>this rule hide all the student branch </div>
<div> ou=Students,ou=People,dc=lagh-univ,dc=dz</div>
<div>on witch it is applied</div>
<div><br>
</div>
<div>need to hide only certain people form student banch for
cn=Students Manage </div>
<div><br>
</div>
<div>pepole that havn't (Affectation=testaff) attribute</div>
<div><br>
</div>
<div>thank's</div>
<div><br>
</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
389 users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</blockquote>
<br>
</body>
</html>