Earlier today, Lim Swee Tat wrote: > I refer you to the aci mechanism of the Netscape Directory Server. Bascially, > aci is an attribute that is allowed in objectclass top. The aci specifies who > and what has access to what how and where... > So... anyone working on that?? I seem to recall someone's working on that on the -devel list - target is for release in OpenLDAP 2.0. dave