Hello, According to SLAPD.ACCESS(5) the access needed to the 'entry' pseudo-attribute always correspond to the access needed on the 'children' pseudo-attribute of the entry's parent. The only exception is the search operation. So what is the purpose of children? Are there examples of ACLs where the two pseudo-attributes are treated differently. Regards, Thierry