Quoting Pierangelo Masarati ando@sys-net.it:
http://www.openldap.org/faq/data/cache/758.html for more details about ACIs. Note, that document is pretty old; something changed across time (which caused this thread, BTW). ACIs need to be documented; our reluctance also stems from the consideration that good documentation would encourage rather than discourage their use... anyway, volunteers are welcome.
I'll try to put in a couple of cents (euro though :) worth as soon as I get more accustomed to the new layout...
I am presume this is a way of apply acl's to objects ?
Yes (experimental, deprecated and discouraged).
Deprecated you say... Anything else that I can use to get this behaviour (no restart because of access control change)?