access to * attr=UserPassword 
 by self write
 by anonymous auth
 
access to dn="ou=addr,uid=(.*),ou=Users,ou=OxObjects,@basedn@"
 attr=uid,objectClass,entry filter=(objectClass=OXUserObject) 
 by self write 
 by dn="uid=$1,ou=Users,ou=OxObjects,@basedn@" write 
 by * none 
 
access to dn.subtree="o=AddressBook,ou=OxObjects,@basedn@"
 by group="cn=AddressAdmins,o=AddressBook,ou=OxObjects,dc=ox- domain,dc=tld" write
 by users read
 by * none
 
access to * attr=uid,objectClass,entry filter=(objectClass=OXUserObject)
 by self write
 by * read

access to dn="uid=mailadmin,ou=Users,ou=OxObjects,@basedn@"
 attr=imapServer,mailDomain,smtpServer,sn,givenName,uid
 by self write
 by users read 

access to dn="uid=mailadmin,ou=Users,ou=OxObjects,@basedn@"
 by self write 
 by * none 

access to dn="ou=addr,uid=(.*),ou=Users,ou=OxObjects,@basedn@"
 by dn="uid=$1,ou=Users,ou=OxObjects,@basedn@" write
 by * none
 
access to dn="ou=Users,ou=OxObjects,@basedn@"
 by self write
 by users read
 by anonymous auth 
			     
access to dn="ou=OxObjects,@basedn@"
  by users read
  by anonymous auth 
			        
access to dn="@basedn@"
  by dn="uid=*,ou=Users,ou=OxObjects,@basedn@" read 
				  
access to * 
  by self write 
  by anonymous auth