3.9. Prevent reuse of user property values#
To prevent reuse of user property values, Nubus for Kubernetes provides the Blocklists management module. For general information about the module, how to activate and configure block lists, and how to manage block list entries, see Blocklists module in Nubus Manual 1.x [3].
By default, every UCS node in the domain
and every member of the Domain Admins group
can write block list entries, and all users can read them.
You can configure the permissions
on the Primary Directory Node
and the Backup Directory Nodes
with the following UCR variables:
For example, if you want to give a user
who isn’t a member of the Domain Admins group
permission to delete block list entries,
create a group that includes the user
and add the group’s LDAP DN to
ldap/database/internal/acl/blocklists/groups/write.