access to dn=".*,ou=Alumni Association,ou=People,o=University of Michigan,c=US$"
by dn="^$" +x continue
- by dn=".*,o=University of Michigan,c=US$" +rsc continue
+ by dn.regex=".+,o=University of Michigan,c=US" +c continue
+ by dn.subtree="o=University of Michigan, c=US" +rs continue
by * stop
access to attr=member
by * read
access to filter="objectclass=groupofnames"
- by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" =sc continue
+ by dn.base="cn=Bjorn Jensen, ou=Information Technology Division, ou=People, o=University of Michigan,c=US" =sc continue
by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" +rw stop
by * break