Expand description
LDAP Access Control Instructions (ACI) system.
This crate implements LDAP-style Access Control Instructions built on top of
the algebraically-correct acls-rs permission system.
§LDAP ACI Overview
LDAP ACIs control access to directory entries and attributes. They consist of:
- Target: What entries/attributes the ACI applies to (DN patterns, filters)
- Permissions: What operations are allowed (read, write, search, compare, add, delete)
- Bind Rules: Who the ACI applies to (user DNs, groups, IP addresses)
Re-exports§
pub use aci::Aci;pub use aci::AciBuilder;pub use aci::AciPolicy;pub use aci::AttributeSet;pub use aci::AuthorizationResult;pub use aci::BindRule;pub use aci::CompOp;pub use aci::DnScope;pub use aci::Scope;pub use aci::TargetAttrFilter;pub use aci::TargetAttrFilterOp;pub use aci::TargetFilter;pub use cache::CachedAciPolicy;pub use entry::LdapAttribute;pub use entry::LdapEntry;pub use operation::LdapOperation;pub use operation::LdapPermission;pub use operation::OperationSet;pub use operation::OperationType;pub use operation::PermissionSlice;
Modules§
- aci
- Access Control Instructions (ACI) implementation.
- cache
- dn
- DN (Distinguished Name) parsing and hierarchy utilities.
- entry
- LDAP directory entries and attributes.
- generator
- ACI text format generators for 389-ds and OpenLDAP formats.
- operation
- LDAP operations and permissions.
- parser
- ACI parsing for 389-ds and OpenLDAP text formats.
- prelude
- transformer
- Format transformation functions for converting between ACI formats.