Oracle Fusion Middleware Administration Guide for Oracle Directory Server Enterprise Edition

ACI “Write”

Note –

By setting this permission, you are also granting users the right to delete attribute values.

In LDIF, to grant employees the right to update their home telephone number and home address, you would write the following statement:

aci: (targetattr="homePhone ||
 homePostalAddress")(version 3.0; acl "Write";
 allow (write) userdn="ldap:///self" ;)

This example assumes that the ACI is added to the ou=People,dc=example,dc=com entry.