Sun Java System Directory Server Enterprise Edition 6.2 Administration Guide

ACI “Write”

Note –

By setting this permission, you are also granting users the right to delete attribute values.

In LDIF, to grant employees the right to update their home telephone number and home address, you would write the following statement:

aci: (targetattr="homePhone ||
 homePostalAddress")(version 3.0; acl "Write";
 allow (write) userdn="ldap:///self" ;)

This example assumes that the ACI is added to the ou=People,dc=example,dc=com entry.