Decentralized administration (as an example manager performing tasks on the own staff) can only be done by creating new profiles for every manager or by setting individual or group acl's for every new manager.

Existing relationships already defined by attributes can't be used.

A very easy solution would be to add macro support (like the one used in email templates) to LDAP filters:
With the use of macros different modules (like Helpdesk) could easily be used for decentralized administration to dynamic scopes with any configuration changes in SSPR.

As an example, the following filter in the Helpdesk module would allow a manager to do tasks on the own staff but no one else:
(&(objectClass=inetOrgPerson)(directReports=@LDAP:DN@)(|...))

This idea was originally entered as an enhancement request: https://secure-www.novell.com/rms/rmsTool?action=WwwActions.viewPropsPage&reqId=105650

by: Tobias L. | over a year ago | Other