From: Howard Chu <hyc@openldap.org>
Date: Mon, 10 Nov 2008 22:18:12 +0000 (+0000)
Subject: ITS#4556 add_content_acl keyword
X-Git-Tag: ACLCHECK_0~1137
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=f136de0a759d6bf1c98f99c61a6d4f238c1ef993;p=openldap

ITS#4556 add_content_acl keyword
---

diff --git a/doc/man/man5/slapd-config.5 b/doc/man/man5/slapd-config.5
index 4c22b3eef2..c028e70aa7 100644
--- a/doc/man/man5/slapd-config.5
+++ b/doc/man/man5/slapd-config.5
@@ -1234,6 +1234,12 @@ which they are defined.  They are supported by every
 type of backend. All of the Global Database Options may also be
 used here.
 .TP
+.B olcAddContentAcl TRUE | FALSE
+Controls whether Add operations will perform ACL checks on
+the content of the entry being added. This check is off
+by default; usually only Write access to the parent entry's
+children pseudo-attribute is required.
+.TP
 .B olcHidden: TRUE | FALSE
 Controls whether the database will be used to answer
 queries. A database that is hidden will never be
diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5
index 8a7f8e8477..84c8c698c6 100644
--- a/doc/man/man5/slapd.conf.5
+++ b/doc/man/man5/slapd.conf.5
@@ -1162,6 +1162,12 @@ or
 .BR sql ,
 depending on which backend will serve the database.
 .TP
+.B add_content_acl on | off
+Controls whether Add operations will perform ACL checks on
+the content of the entry being added. This check is off
+by default; usually only Write access to the parent entry's
+children pseudo-attribute is required.
+.TP
 .B hidden on | off
 Controls whether the database will be used to answer
 queries. A database that is hidden will never be