OUD - How to Use an ACI to Prevent Adding an Entry Which Contains an Attribute That is Not Allowed For Add or Write Rights

(Doc ID 2400102.1)

Last updated on JUNE 01, 2018

Applies to:

Oracle Unified Directory - Version 11.1.1.5.0 and later
Information in this document applies to any platform.

Goal

This article shows how to prevent an entry from being added if the entry contains attributes that are not allowed to be added by an ACI.

Scenario -

App #1 is responsible for adding group entries but is not allowed to add group members.
App #2 is responsible for adding group members.

The ACI example below shows how adding a group entry will fail if the group entry contains the attribute specifying group membership (in this example, uniquemember).
 

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms