# Access to users personal addressbooks
# -------------------------------------
access to dn.subtree="ou=ldapuser1,ou=personal,ou=contacts,ou=addressbook,dc=lan,dc=home"
    by dn.base="uid=ldapuser1,ou=accounts,ou=addressbook,dc=lan,dc=home" write
    by * none

access to dn.subtree="ou=ldapuser2,ou=personal,ou=contacts,ou=addressbook,dc=lan,dc=home"
    by dn.base="uid=ldapuser2,ou=accounts,ou=addressbook,dc=lan,dc=home" write
    by * none


# Access to groups addressbooks
# -----------------------------
access to dn.subtree="ou=familie,ou=shared,ou=contacts,ou=addressbook,dc=lan,dc=home"
    by dn.base="uid=ldapuser1,ou=accounts,ou=addressbook,dc=lan,dc=home" write
    by dn.base="uid=ldapuser2,ou=accounts,ou=addressbook,dc=lan,dc=home" write
    by * none

access to dn.subtree="ou=fli4l-eisfair,ou=shared,ou=contacts,ou=addressbook,dc=lan,dc=home"
    by dn.base="uid=ldapuser1,ou=accounts,ou=addressbook,dc=lan,dc=home" write
    by * none