Create and Delete Child Permissions Exhibit Inconsistent Behavior

ID: Q216844

The information in this article applies to:

SYMPTOMS

In the Membership Directory Manager, the Create Child permission behavior is not consistent with the Delete Child behavior.


CAUSE

The objectclass granularity on ACLs does not work correctly when you create an object. The ACL check code for creating a child and for ModifyDN is using the Parent Objects class instead of the object to be created.


RESOLUTION

To resolve this problem, apply the latest Site Server 3.0 service pack.


STATUS

Microsoft has confirmed this to be a problem in Microsoft Site Server version 3.0. This problem has been corrected in the latest U.S. service pack for Microsoft Site Server version 3.0. For information on obtaining the service pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K

Additional query words: 


Keywords          : SS3SP2Fix 
Version           : winnt:3.0
Platform          : winnt 
Issue type        : kbbug

Last Reviewed: March 26, 1999