Hi,
What about trying to modify/delete it with the noop control?
that is a good tip, thank you at all. i will try to implement this, but i think this is some kind of "hack" anyway. additionally i will check if a solution with the aci's is also possible.
googling around i've found a control named "effective rights": https://opends.dev.java.net/public/standards/draft-ietf-ldapext-acl-model.tx...
is this supported by openldap?
many thanks for your suggestion regards, s.