1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
access to dn.base=""
by dn="uid=root,ou=Users,ou=OxObjects,@basedn@" write
by * read
access to dn.base="cn=Subschema"
by dn="uid=root,ou=Users,ou=OxObjects,@basedn@" write
by * read
# protect the userPassword attribute
access to attrs=userPassword,shadowLastChange
by dn="uid=root,ou=Users,ou=OxObjects,@basedn@" write
by anonymous auth
by self write
by * none
# global address book
access to dn.subtree="o=AddressBook,ou=OxObjects,@basedn@"
by dn="uid=root,ou=Users,ou=OxObjects,@basedn@" write
by group.exact="cn=AddressAdmins,o=AddressBook,ou=OxObjects,@basedn@" write
by users read
# personal address book
access to dn.regex="^ou=addr,(uid=([^,]+),ou=Users,ou=OxObjects,@basedn@)$" attrs=children
by dn="uid=root,ou=Users,ou=OxObjects,@basedn@" write
by dn.exact,expand="$1" write
access to dn.regex="^uid=([^,]+),ou=addr,(uid=([^,]+),ou=Users,ou=OxObjects,@basedn@)$" attrs=entry
by dn="uid=root,ou=Users,ou=OxObjects,@basedn@" write
by dn.exact,expand="$2" write
# default rule allowing users full access to their own entries
# In order to let users modify their attributes through OX, you must grant
# users access to modify uid because of upstream bug #736:
# http://www.open-xchange.org/cgi-bin/bugzilla/show_bug.cgi?id=736
#
# This is not secure and thus hasn't been set here. To enable it, add
# uid to the following list
access to attrs=birthDay,cn,description,facsimileTelephoneNumber,gecos,givenName,homePhone,initials,l,labeledURI,mobile,o,ou,OXAppointmentDays,OXDayViewInterval,OXDayViewEndTime,OXDayViewStartTime,OXTaskDays,OXTimeZone,pager,postalCode,preferredLanguage,sn,st,street,telephoneNumber,title,userCountry
by dn="uid=root,ou=Users,ou=OxObjects,@basedn@" write
by self write
by * read
access to *
by dn="uid=root,ou=Users,ou=OxObjects,@basedn@" write
by * read
# This is supposed to give a performance boose, but it just breaks things for
# me -- eradicator
#index uid,mailEnabled,cn,sn,givenname,lnetMailAccess,alias,loginDestination eq,sub
|
GitWeb
