2008/6/26 Chris G. Sellers Chris.Sellers@nitle.org:
I thought about that, but checked and I think they are okay.
The last entry in the ACL list has an entry like this
access to * by dn.exact="cn=repluser,ou=ou,dc=nitle,dc=org" write by dn.exact="cn=mirroruser,ou=ou,dc=nitle,dc=org" write
Remember it's top down when they get assessed:
and add
by * break