access to * attr=UserPassword
        by self write
        by anonymous auth


access to dn="ou=addr,uid=(.*),ou=Users,ou=OxObjects,dc=localnet,dc=com" attr=uid,objectClass,entry filter=(objectClass=OXUserObject)
        by self write
        by dn="uid=$1,ou=Users,ou=OxObjects,dc=localnet,dc=com" write
        by * none

access to dn.subtree="o=AddressBook,ou=OxObjects,dc=localnet,dc=com"
        by group="cn=AddressAdmins,o=AddressBook,ou=OxObjects,dc=localnet,dc=com" write
        by users read
        by * none

access to * attr=uid,objectClass,entry filter=(objectClass=OXUserObject)
        by self write
        by * read

access to dn="uid=mailadmin,ou=Users,ou=OxObjects,dc=localnet,dc=com" attr=imapServer,mailDomain,smtpServer,sn,givenName,uid
        by self write
        by users read

access to dn="uid=mailadmin,ou=Users,ou=OxObjects,dc=localnet,dc=com"
        by self write
        by * none

access to dn="ou=addr,uid=(.*),ou=Users,ou=OxObjects,dc=localnet,dc=com"
        by dn="uid=$1,ou=Users,ou=OxObjects,dc=localnet,dc=com" write
        by * none

access to dn="ou=Users,ou=OxObjects,dc=localnet,dc=com"
        by self write
        by users read
        by anonymous auth

access to dn="ou=OxObjects,dc=localnet,dc=com"
        by users read
        by anonymous auth

access to dn="dc=localnet,dc=com"
        by dn="uid=*,ou=Users,ou=OxObjects,dc=localnet,dc=com" read

access to *
        by self write
        by users read
        by anonymous auth