Hi,
Thinking of my subtree as a file system directory, I understood what you meant by your answer and this the solution to my problem: access to dn="ou=PGP Keys,o=SNCFT,c=TN" by users write by * read access to dn.children="ou=PGP Keys,o=SNCFT,c=TN" by dnattr=creatorsName write by * read
Now, an authenticated user can create a new entry but can't overwite someone else's entry.
Thank you.
Fathi B.N.