Uploaded image for project: 'OpenDJ'
  1. OpenDJ
  2. OPENDJ-1392

Prevent certain values from being returned in isMemberOf

    XMLWordPrintable

Details

    • New Feature
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 2.6.0
    • None
    • access control
    • None

    Description

      Users (students) are members of multiple groups (classes). To comply with external regulations, some administrators must not be able to see which students are in particular classes.

      Preventing the group entries from being read with aci works well, however the administrator can still determine if a student is in a certain group by reading the student's isMemberOf attribute.

      We can prevent certain values from being added or deleted from general attributes using targattrfilter. However there is no way to prevent particular values from being returned, which would solve their use case.

      Attachments

        Activity

          People

            matthew Matthew Swift
            cjr Chris Ridd
            Votes:
            2 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: