Hi,

Thinking of my subtree as a file system directory, I understood what you meant by your answer and this the solution to my problem: access to dn="ou=PGP Keys,o=SNCFT,c=TN" by users write by * read access to dn.children="ou=PGP Keys,o=SNCFT,c=TN" by dnattr=creatorsName write by * read

Now, an authenticated user can create a new entry but can't overwite someone else's entry.

Thank you.

Fathi B.N.