Mattes wrote:

Setting olcLogLevel should do it without restarting. But that will trace _all_ requests, not really an option on a production system. Looks like I have to clone the database to debug the ACLs.

You're testing new ACLs on a production system without having tested them on an isolated test system? This is asking for trouble!

Ciao, Michael.