Overview#

The get effective rights control is a type of supportedControl that can be used to determine the rights that a given user has when interacting with a given entry. The control has an OID of 1.3.6.1.4.1.42.2.27.9.5.2 and uses the following definition:

GetRightsControl ::= SEQUENCE {
  authzId    authzId
  attributes  SEQUENCE OF AttributeType
}

-- Only the "dn:DN form is supported.

.

For an example of using this control in a search request, see Search Using the Get Effective Rights Control.

There is also a supportedExtension#

• getEffectivePrivilegesRequest
• getEffectivePrivilegesResponse

More Information#

There might be more information for this subject on one of the following:

• Glossary Of LDAP And Directory Terminology
• LDAP Extensions and Controls Listing
• Search Using the Get Effective Rights Control
• SupportedControl