Re: check write permissions to user object attribute

Look at allowedAttributesEffective, e.g.
http://forums.asp.net/p/1005854/1335331.aspx#1335331

--
Dmitri Gavrilov
SDE, Exchange

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm

<drewhealey@xxxxxxxxx> wrote in message news:1191691918.137092.294390@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I am writing an HTA that allows users to modify their attributes in
Active Directory. The HTA takes their current credentials and fills
out a form with all their object attribute values. Then, the user can
modify those fields as they need.

The problem is that many of the attributes do not natively allow write
access to the SELF object. So, the permissions to that attribute must
be delegated. However, I have an instance where I only want managers
to be able to modify the departmentNumber attribute. So, I delegate
write permissions to the group managers. Now, I would like my hta to
be able to programmaticly check and see if the user that launches the
app has read-only or write permissions to the attribute.

Does anybody know how to do this? I haven't been able to find any
documentation that even gives me the foggiest idea of how to script
this.

Thanks!

http://sourceforge.net/projects/adumass

Drew


.

Relevant Pages

  • Re: Restore permissions on GAL
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > Please do not send email to this address, post a reply to this newsgroup. ... > Use of included script samples are subject to the terms specified at ... I changed the permissions on GAL by mistake. ...
    (microsoft.public.exchange.admin)
  • RE: File Access
    ... done remotely manageing share permissions would be easier and less prone to ... You could change share permissions through a script that ran as a scheduled ... Use of included script samples are subject ...
    (microsoft.public.win2000.security)