Dear slapd-Experts, I've a perhaps slightly strange question regarding tweaking of be_acl from within an overlay and would be very happy if you could please help me. I'm looking after a possibility to change AccessControl struct's content on "overlay-operation-basis": For each processed Operation within my test overlay I want to modify this sample ACL from a) into b): a) cn=config initially stores: access to filter=(x=*) by users read by * none b) overlay has detected operation "z" ==> the acl should be tuned into: access to filter=(y=*) by users read by * none I think I've already found the concerned structs and I'm able to get the above modification done in theory, but I'm a little bit afraid/unsure regarding side effects, e.g thread locking and so on. I could imagine that in general be_acl is not intend to be changed from one operation to another...?! What would be the "best" pseudo-code-style way to achive the above a-b-transition in a safe/consistent way from within an overlay? Many thanks for your advice! Cheers Daniel