ITS#4556 clarify Add requirements

diff --git a/doc/man/man5/slapd-config.5 b/doc/man/man5/slapd-config.5
index f4095a39ab57ec423693fe891c6de29b046ff839..41e7da2cf27551051c71c236280855282534504c 100644 (file)
--- a/doc/man/man5/slapd-config.5
+++ b/doc/man/man5/slapd-config.5
@@ -1237,8 +1237,10 @@ used here.
 .B olcAddContentAcl: TRUE | FALSE
 Controls whether Add operations will perform ACL checks on
 the content of the entry being added. This check is off
-by default; usually only Write access to the parent entry's
-children pseudo-attribute is required.
+by default. See the
+.BR slapd.access (5)
+manual page for more details on ACL requirements for
+Add operations.
 .TP
 .B olcHidden: TRUE | FALSE
 Controls whether the database will be used to answer

diff --git a/doc/man/man5/slapd.access.5 b/doc/man/man5/slapd.access.5
index 5fe76f684e63213addb35006667491b9cb0a3edb..dd24af2018187883e165b65f637c9ec3ef046707 100644 (file)
--- a/doc/man/man5/slapd.access.5
+++ b/doc/man/man5/slapd.access.5
@@ -911,7 +911,15 @@ When adding the suffix entry of a database,
 .B add
 access to
 .B children
-of the empty DN ("") is required.
+of the empty DN ("") is required. Also if
+Add content ACL checking has been configured on
+the database (see the
+.BR slapd.conf (5)
+or
+.BR slapd-config (5)
+manual page),
+.B add (=a)
+will be required on all of the attributes being added.
 
 .LP
 The 

diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5
index 84c8c698c68190493cf44190fc8bb1eb747adc21..3e2ab714d26bb4c7db5bb59617be39f3c060afa8 100644 (file)
--- a/doc/man/man5/slapd.conf.5
+++ b/doc/man/man5/slapd.conf.5
@@ -1165,8 +1165,10 @@ depending on which backend will serve the database.
 .B add_content_acl on | off
 Controls whether Add operations will perform ACL checks on
 the content of the entry being added. This check is off
-by default; usually only Write access to the parent entry's
-children pseudo-attribute is required.
+by default. See the
+.BR slapd.access (5)
+manual page for more details on ACL requirements for
+Add operations.
 .TP
 .B hidden on | off
 Controls whether the database will be used to answer