From: Howard Chu <hyc@openldap.org>
Date: Sun, 21 Sep 2003 11:07:32 +0000 (+0000)
Subject: ITS#2497 value-level ACLs
X-Git-Tag: OPENLDAP_REL_ENG_2_1_MP~686
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=14745b74d29fe80f2988908b3f3fa3a4532937d9;p=openldap

ITS#2497 value-level ACLs
---

diff --git a/doc/guide/admin/slapdconfig.sdf b/doc/guide/admin/slapdconfig.sdf
index 112d9d96ae..7b6bf2464c 100644
--- a/doc/guide/admin/slapdconfig.sdf
+++ b/doc/guide/admin/slapdconfig.sdf
@@ -631,7 +631,7 @@ access line is:
 >		[filter=<ldapfilter>] [attrs=<attrlist>]
 >	<basic-style> ::= regex | exact
 >	<scope-style> ::= base | one | subtree | children
->	<attrlist> ::= <attr> | <attr> , <attrlist>
+>	<attrlist> ::= <attr> [val[.<basic-style>]=<regex>] | <attr> , <attrlist>
 >	<attr> ::= <attrname> | entry | children
 >	<who> ::= * | [anonymous | users | self
 >			| dn[.<basic-style>]=<regex> | dn.<scope-style>=<DN>] 
@@ -719,8 +719,13 @@ list of attribute names in the <what> selector:
 
 >	attrs=<attribute list>
 
+A specific value of an attribute is selected by using a single
+attribute name and also using a value selector:
+
+>	attrs=<attribute> val[.<style>]=<regex>
+
 There are two special {{pseudo}} attributes {{EX:entry}} and
-{{EX:children}}.  To read (and hence return) an target entry, the
+{{EX:children}}.  To read (and hence return) a target entry, the
 subject must have {{EX:read}} access to the target's {{entry}}
 attribute.  To add or delete an entry, the subject must have
 {{EX:write}} access to the entry's {{EX:entry}} attribute AND must