# this rule allows the user to modify him or herself access to dc.subtree="ou=Users,dc=example,dc=com" by self write by * read
The above should read:
dn.subtree
not
dc.subtree
--Quanah
-- Quanah Gibson-Mount Principal Software Developer ITSS/Shared Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html