Limiting access to controls and extended operations

Oracle Directory Server Enterprise Edition (DSEE) provides limited support for restricting access to controls and extended operations.

To the extent that you can control access to controls and extended operations with access control instructions (ACIs), DSEE defines entries with a distinguished name (DN), such as oid={oid},cn=features,cn=config, where {oid} is the OID of the associated control or extended operation. For example, the following DSEE entry defines ACIs for the persistent search control.

In the server, you can use the targetcontrol keyword to define ACIs that grant or deny access to controls. You can use the extop keyword to define ACIs that grant or deny access to extended operation requests.