6.2 Attribute Access Control Rights

Table 6-2 Attribute Rights

Flag Name

C Value

Description

LDAP_DS_ATTR_COMPARE

0x00000001L

Allows a trustee to compare a value with an attribute’s value. This allows the trustee to see if the attribute contains the value without having rights to see the value.

LDAP_DS_ATTR_READ

0x00000002L

Allows a trustee to read an attribute value. This right confers the Compare right.

LDAP_DS_ATTR_WRITE

0x00000004L

Allows a trustee to add, delete, or modify an attribute value. This right also gives the trustee the Self (Add or Delete Self) right.

LDAP_DS_ATTR_SELF

0x00000008L

Allows a trustee to add or delete its name as an attribute value on those attributes that take object names as their values.

LDAP_DS_ATTR_SUPERVISOR

0x00000020L

Gives a trustee all rights to the object’s attributes.

LDAP_DS_ATTR_INHERIT_CTL

0x00000040L

Allows a trustee to inherit the rights granted in the ACL and exercise these attribute rights on subordinate objects.