Hi, I want write an ACL that defines this rule : An user with an attribute rights with the value USERS-manager has got the right "write" in the subtree ou=toto,dc=XXX,dc=fr The ACL would be as this : access to dn.subtree=ou=toto,dc=XXX,dc=fr by ......................... write what's the right syntax ? Thanks Philippe