At 02:19 PM 7/21/00 -0400, Adam Tauno Williams wrote: >I have the following access controls. > >defaultaccess read >access to * > by group/organizationalRole/roleOccupant="cn=cis,ou=Groups,o=Morrison >Industries,c=US" write remaining ACLs don't matter as the above ACL matches is always applied (those not in group get the implied "by * read"). See FAQ and archives for details and examples.