From: Howard Chu <hyc@openldap.org>
Date: Sun, 21 Sep 2003 10:34:40 +0000 (+0000)
Subject: ITS#2497 value-level ACLs
X-Git-Tag: OPENLDAP_REL_ENG_2_1_MP~689
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=b93a0f45d59000b02f820868e1d1d3974c81d7d0;p=openldap

ITS#2497 value-level ACLs
---

diff --git a/doc/man/man5/slapd.access.5 b/doc/man/man5/slapd.access.5
index 2234e85abf..4134cecab3 100644
--- a/doc/man/man5/slapd.access.5
+++ b/doc/man/man5/slapd.access.5
@@ -123,7 +123,21 @@ indicating access to the entry's children. ObjectClass names may also
 be specified in this list, which will affect all the attributes that
 are required and/or allowed by that objectClass.
 .LP
-The last three statements are additive; they can be used in sequence 
+Using the form
+.B attrs=<attr> val[.<style>]=<value>
+specifies access to a particular value of a single attribute.
+In this case, only a single attribute type may be given. A value
+.B <style>
+of
+.B exact
+(the default) uses the attribute's equality matching rule to compare the
+value. If the
+.B <style>
+is
+.BR regex ,
+the provided value is used as a regular expression pattern.
+.LP
+The dn, filter, and attrs statements are additive; they can be used in sequence 
 to select entities the access rule applies to based on naming context,
 value and attribute type simultaneously.
 .LP