ACI to read/write a single BRANCH ...

Hello gurus !

My situation is a tree like this:

o=entry

+ou=one

+ou=two

+ou=three

+ou=four

I would like to create a user able to modify/read/etc.etc. ONLY ou=four contents...

I've placed a uid=fouradmin, ou=four,o=entry and I've created an ACI to let it do everything under ou=four.

Now, if I create a new ACI in ou=four to EXCLUDE access to ANYONE, this ACI became the stronger and I'm not able to do nothing with uid=fouradmin......

How can I bypass this situation and allow ONLY to uid=fouradmin complete access to ou=four and subsequential ?

Thanks,

silvio

I forgot to say that o=entry ( and subsequentials ) has the standard read only accett to all users...

Thanks,

silvio

Message was edited by:

infocamere

[828 byte] By [infocamere] at [2007-11-26 11:20:35]