Hi,

Reading [0] and [1] I can't seem to find how to grant an object the right to execute the getEffectiveRights extended operation. At this time I seem to only be able to carry this out with Directory Manager.

What aci is needed to allow some groupdn access to the GER operation?

[0] https://access.redhat.com/documentation/en -US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Viewing_the_ ACIs_for_an_Entry-Get_Effective_Rights_Control.html

[1] https://access.redhat.com/documentation/en -US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Acc ess_Control.html#Managing_Access_Control-Access_Control_Principles