What permissions does the com.novell.nds.dirxml.driver.cmd.DriverCmd require to send a command

  • 7016825
  • 08-Sep-2015
  • 08-Sep-2015

Environment

NetIQ Identity Manager Engine Functionality

Situation

 What permissions does the com.novell.nds.dirxml.driver.cmd.DriverCmd require to send a command?

Resolution

This is a utility method that wraps the verb invocation (basically the submit/get invocation that has been mentioned in the post). The IDM engine however does not use this and it seems to exist mainly to be called from a policy ecma or java extension.

The rights that are checked are that the current driver thread should have ENTRY_RIGHTS = ACL_ENTRY_SUPERVISOR (16) on the driver to which the document has to be submitted.