diff options
Diffstat (limited to 'install/updates/20-aci.update')
| -rw-r--r-- | install/updates/20-aci.update | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/install/updates/20-aci.update b/install/updates/20-aci.update new file mode 100644 index 000000000..42f1e9fe6 --- /dev/null +++ b/install/updates/20-aci.update @@ -0,0 +1,4 @@ +# Don't allow managed netgroups to be modified +dn: cn=ng,cn=alt,$SUFFIX +add:aci: '(targetfilter = "(objectClass=mepManagedEntry)")(targetattr = "*")(version 3.0; acl "Managed netgroups cannot be modified"; deny (write) userdn = "ldap:///all";)' + |