by dnattr=uniquemember selfwrite
by * read
-access to attr=member,uniquemember filter=(mail=*com)
+access to attr=member,uniquemember filter="(mail=*com)"
by * read
-access to filter="(&(objectclass=groupofnames)(objectClass=groupofuniquenames)
- )"
- by dn.base="cn=Bjorn Jensen,ou=Information Technology Division,ou=People,dc=
- example,dc=com" =sc continue
- by dn.regex="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,d
- c=example,dc=com$" +rw stop
+access to filter="(&(objectclass=groupofnames)(objectClass=groupofuniquenames))"
+ by dn.base="cn=Bjorn Jensen,ou=Information Technology Division,ou=People,dc=example,dc=com" =sc continue
+ by dn.regex="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,dc=example,dc=com$" +rw stop
by * break
-access to dn.children="ou=Information Technology Division,ou=People,dc=exampl
- e,dc=com"
- by group/groupOfUniqueNames/uniqueMember.exact="cn=ITD Staff,ou=Groups,dc=ex
- ample,dc=com" write
+access to dn.children="ou=Information Technology Division,ou=People,dc=example,dc=com"
+ by group/groupOfUniqueNames/uniqueMember.exact="cn=ITD Staff,ou=Groups,dc=example,dc=com" write
by * read
access to filter="(name=X*Y*Z)"