access to dn="" by * read

access to dn="cn=Subschema"
        by dn="cn=.*,ou=admins,o=mail" +rwscx break
        by * +x break

access to dn.one="o=mail"
        by dn="cn=.*,ou=admins,o=mail"  +rscx break
        by * +x break

access to dn.one="ou=admins,o=mail"
        by dn="cn=prebind,ou=admins,o=mail"  +rscx break
        by * +x break

access to dn="cn=([^,]+),ou=admins,o=mail" attrs=userPassword
        by dn="cn=prebind,ou=admins,o=mail"  auth
        by * +x break

access to dn="cn=([^,]+),ou=admins,o=mail"
        by dn="cn=prebind,ou=admins,o=mail"  +rscx break
        by * +x break

access to dn.one="ou=mailboxes,o=mail"
        by dn="cn=.*,ou=admins,o=mail"  +rscx break
        by * +x break

access to dn.one="ou=local,ou=mailboxes,o=mail"
        by dn="cn=.*,ou=admins,o=mail"  +rscx break
        by * +x break

access to dn="dc=([^,]+),ou=local,ou=mailboxes,o=mail"
        by dn="cn=$1,ou=admins,o=mail" +rwscx break
        by * +x break


access to dn.subtree="o=mail"
        by dn="cn=mailerwrite,ou=admins,o=mail" +rwscx  break
        by dn="cn=mailerread,ou=admins,o=mail" +rscx break
        by group="cn=admins,ou=admins,o=mail" +rwscx break
        by * +x break

access to *
        by anonymous +x
        by * +sx