3.1.1.5.3.7.1 Undelete Security Considerations

In order to be able to perform the undelete operation as an originating update, the requester MUST have the following permissions. No permissions are required for replicated updates.

• The Reanimate-Tombstones control access right on the NC root of the NC where the operation is being performed.

• All the permissions required to rename an object (section 3.1.1.5.4).

• CREATE_CHILD on the new parent container for the objectClass of the object being undeleted.

Note Unlike with the Modify DN operation, the Delete/DeleteChild permission is not required.