Security Considerations

No permissions are required for replicated updates.

For originating updates, the requester must have the following permissions.

To delete a regular object, at least one of the following permissions must be granted to the requester:

  • RIGHT_DELETE on the object being deleted, or

  • RIGHT_DS_DELETE_CHILD on the parent of the object being deleted, when the object is not an NC root.

For originating updates of transformations of deleted-objects to recycled-objects, all the same security requirements as those listed for a normal deletion must be met. In addition, the requester must have the permission RIGHT_DS_REANIMATE_TOMBSTONES on the NC root of the NC where the operation is being performed.