access problem. (newby)

[aj-openldap-software@dungeon.inka.de]

hi. for a small group of people i try to build a small realm with our
address data, so we be in contact. it´s meant that only people on that
list can view everything, update their own data, and i should
be able to change/modify/add everything as admin of the realm.

i tried it this way:
access to attribute=userPassword
        by dn="" write
	by anonymous auth
	by self write
	by * none

access to dn="ou=abi95,dc=tlng,dc=de"
	by dn="ou=abi95,dc=tlng,dc=de" read
	by self write
	by dn="cn=Andreas Jellinghaus,ou=abi95,dc=tlng,dc=de" write
	by * none

i tried to add one extra person:
dn: cn=Some One , ou=abi95, dc=tlng, dc=de
objectClass: person
cn: Some One
mail: Some.One@some.where.de
userPassword: test

i was autheticated as "cn=Andreas...", but it doesn´t work
("additional info: no write access to parent").

i thought write to ou=abi95... should be enough ?
what access rules do i need ?

thanks for your help.

regards, andreas

----- End forwarded message -----

--