DSEE offers limited support for restricting access to controls and extended operations. To
the extent that it is possible to control such access with ACIs, DSEE defines entries with a
DN such as "
the OID of the associated control or extended operation. For example, the following DSEE entry
defines ACIs for the persistent search control:
In the PingDirectory Server, the
targetcontrol" keyword can be used to define ACIs that grant or deny
access to controls. The "
extop" keyword can be used to define ACIs that grant
or deny access to extended operation requests.