[Fedora-directory-devel] ACI evaluation

[discover]

Thanks David . Regarding the order of ACI , I meant for example, say 
there are 4 ACIs on dc=example,dc=com.
One for config admins, one for directory admins, Anonymous Access and 
one for group admin listed in that order. Whether this particular order 
has any impact ? Or the order is insignificant ?

David Boreham wrote:

> discover wrote:
>
>> Is there any way to see the order of ACI evaluation for search/mod 
>> ...etc ? 
>
>
> Not easily. You might me able to glean some information by enabling
> access control logging and looking at the error log output when you 
> submit
> an operation.
>
>> Also does the order of ACI impact the performance ?
>
>
> Probably not. (not sure if you mean the order the aci attributes
> are added to the DS -- in that case absolutely not; or if you
> are asking about the internal ordering of clauses within a
> single aci -- in that case probably not).
>
> To gain a total understanding you'd really need to step through
> the code in the debugger, which would only suit those
> with a strong constitution.
>
>
>
> -- 
> Fedora-directory-devel mailing list
> Fedora-directory-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-devel
>