3.1.1.4.5.7 allowedAttributesEffective

Let TO be the object from which the allowedAttributesEffective attribute is being read.

The value of TO!allowedAttributesEffective is the subset of values returned by allowedAttributes for which values (O) conform to the following:

• TO!nTSecurityDescriptor grants RIGHT_DS_WRITE_PROPERTY on O to the requester

• and (O!linkID is even or O!linkID is not present)

• (and (not bit 0x4 is set in O!systemFlags) or O!lDAPDisplayName is entryTTL)