My network's core user database is managed by OpenLDAP. Recently we need to introduce a possibility for one user to act on second user's behalf. As all application-related rights and permissions are stored in the LDAP we also want to store the new schema in the same place.
My question is - are there comonly renown schemas or best practices to store such delegated permissions in LDAP? I've heard there is such functionality in MS Exchange which uses Active Directory.