2.5.24.6 - id-aca-subentryACI

OID value: 2.5.24.6

OID description:
Subentry ACI attributes are defined as operational attributes of administrative entries, and provide access control information that applies to each of the subentries of the corresponding administrative point. Prescriptive ACI within the subentries of a particular administrative point never applies to the same or any other subentry of that administrative point, but can be applicable to the subentries of subordinate administrative points. Subentry ACI attributes are contained only in administrative points and do not affect any elements of the DIT other than immediate subordinate subentries.

In evaluating access control for a specific subentry, the ACI that must be considered is:

• The entryACI within the subentry itself(if any);
• The subentryACI within the associated administrative entry (if any);
• prescriptiveACI associated with other relevant administrative points within the same access control specific area (if any).

subentryACI ATTRIBUTE ::= {
	WITH SYNTAX ACIItem
	EQUALITY MATCHING RULE directoryStringFirstComponentMatch
	USAGE directoryOperation
	ID id-aca-subentryACI
}

Superior references

• 2.5.24 - X.500 access control attribute
• 2.5 - X.500 Directory Services
• 2 - ISO/ITU-T jointly assigned OIDs
• Top of OID tree