title: programmatically querying LDAP permissions
body: <p>Is there any way to programmatically query an OpenLDAP 2.4 server to find out what attributes of some object a user is allowed to modify? Or any way to tell the server to ignore modifications that the current user doesn't have permission to make, instead of rejecting the whole request?</p>
  
  <p>I'm looking for some way I can avoid hard-coding which users should see which fields as editable in my LDAP management webapp.</p>