From a971589fcb77504bc412b020bc7baae0aed23fec Mon Sep 17 00:00:00 2001 From: Martin Zobel-Helas Date: Sat, 18 Aug 2012 18:24:57 +0200 Subject: [PATCH 1/1] fix permissions Signed-off-by: Martin Zobel-Helas --- userdir-ldap-slapd.conf.in | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/userdir-ldap-slapd.conf.in b/userdir-ldap-slapd.conf.in index 2ae78b3..67b6016 100644 --- a/userdir-ldap-slapd.conf.in +++ b/userdir-ldap-slapd.conf.in @@ -50,10 +50,11 @@ access to filter="(!(supplementaryGid=adm))" attrs=keyFingerPrint # allow listmasters to write to the privateSub attribute access to attrs=privateSub by group="cn=Listmasters,ou=users,@@DN@@" write + by self write by * break # allow users write access to an explicit subset of their fields -access to attrs=c,l,loginShell,ircNick,labeledURI,icqUIN,jabberJID,onVacation,birthDate,mailDisableMessage,gender,emailforward,mailCallout,mailGreylisting,mailRBL,mailRHSBL,mailWhitelist,mailContentInspectionAction,mailDefaultOptions,facsimileTelephoneNumber,telephoneNumber,postalAddress,postalCode,loginShell,onVacation,privateSub,latitude,longitude,VoIP,userPassword,sudoPassword,webPassword,voipPassword,bATVToken +access to attrs=c,l,loginShell,ircNick,labeledURI,icqUIN,jabberJID,onVacation,birthDate,mailDisableMessage,gender,emailforward,mailCallout,mailGreylisting,mailRBL,mailRHSBL,mailWhitelist,mailContentInspectionAction,mailDefaultOptions,facsimileTelephoneNumber,telephoneNumber,postalAddress,postalCode,loginShell,onVacation,latitude,longitude,VoIP,userPassword,sudoPassword,webPassword,voipPassword,bATVToken by self write by * break -- 2.20.1