What's the supported way to write an OpenLDAPaci which grants read and search access to everyone? Experimentation showed that this works: OpenLDAPaci: 1#entry#grant;r,s,c;[all],[entry]#access-id#[all] but [all] as subject is undocumented and the documentation warns that such features may change in the future. -- Hallvard