On 25/5/2012 2:37 μμ, Andrew Findlay wrote:
In the example above, the first access statement does not have a
<control> clause for dn.exact="cn=The Update DN,dc=example,dc=com" so
it uses the default, which is 'stop'.
Fine. Thank you Andrew, I see. Control clauses are on a per-<who>-clause
Note that your second access statement does not specify any
access for dn.exact="cn=Some Other DN,dc=example,dc=com" so it won't
be much use.
OK, it was just an example. I now see it was incomplete; sorry for the
confusion. At least I made my thinking clear enough.
It should have been:
access to dn.subtree="ou=people,dc=example,dc=com"
by dn.exact="cn=Some Other DN,dc=example,dc=com" write
by * none