6.1 Object Access Control Rights

Table 6-1 Object Rights

Flag Name

C Value

Description

DS_ENTRY_BROWSE

0x00000001L

Allows a trustee to discover objects in the eDirectory tree.

DS_ENTRY_ADD

0x00000002L

Allows a trustee to create child objects (new objects that are subordinate to the object in the tree).

DS_ENTRY_DELETE

0x00000004L

Allows a trustee to delete an object. This right does not allow a trustee to delete a container object that has subordinate objects.

DS_ENTRY_RENAME

0x00000008L

Allows a trustee to rename the object.

DS_ENTRY_SUPERVISOR

0x00000010L

Gives a trustee all rights to an object and its attributes.

DS_ENTRY_INHERIT_CTL

0x00000040L

Allows a trustee to inherit the rights granted in the ACL and exercise them on subordinate objects.