[Freeipa-devel] [PATCH] better access control and other minor things

[Simo Sorce]

On Wed, 2007-12-12 at 11:19 -0500, John Dennis wrote:
> I noticed the radius aci was changed from being an aci with a target=dn 
> to a aci on the dn. For my own edification why is this preferred or was 
> it just not right in the first place?

I prefer to keep ACIs on a specific tree on it's root, this helps better
understand the scope of the ACI and also goes away automatically if we
kill or the tree and moves with the tree should we decide to rename it
before release without risking to forget about it.

Simo.

-- 
| Simo S Sorce |
| Sr.Soft.Eng. |
| Red Hat, Inc |
| New York, NY |