At 02:24 PM 3/16/00 -0500, A. Paul Heely Jr. wrote: >Let's say that each entry in our database consists of name and >telephone_number. If we search by name then we want name and >telephone_number to be returned. We don't want to be able to search >by telephone_number. You cannot disallow search by readable attributes. OpenLDAP 1.x ACLs do not provide discrete access permissions.