Adding your login user object as a trustee to a target object

Adding your login user object as a trustee to a target object
You must look in the target object's Access Control List (ACL) to modify or add a trustee relationship. To do this, use an administration tool like Novell's ConsoleOne .

The following steps will take you through adding a login object, in this case the admin object, as a trustee for a target attribute in a target object so that the attribute can be operated upon (read, written to, etc.) through a connection authenticated for the login object.

1.Select the target object that your application will be operating on and then display its trustee information as shown in Figure 1.

 Figure 1

2. Select "Add Trustee" to add the login object to the target object's ACL as a trustee. After adding the login object, select it and click 'Assigned Rights' to display the default rights that have been assigned to it as shown in Figure 2.

  Figure 2

3. Select the level of operation (i.e., read, write, etc.) that you want the login object to have for the target attribute that it will be accessing (see Figure 3).

 Figure 3

The value or values of the attribute that you set up for access by the login object will now be accessible using this example's application if you specify it properly. In this case, proper specification means an accurate distinguished name for the target object , (see " Building an LDAP distinguished name") and an attribute name that has been mapped in the LDAP Group object, (see "Selecting a mapped LDAP attribute name ").

Using the process above, you can give the login user object access to any attribute of any other object.