# These access lines apply to database #1 only
access to attrs=userPassword,shadowLastChange
        by dn="uid=admin,dc=mni,dc=pl" write
        by anonymous auth
        by self write
        by * none

access to dn.base="" by * read

# The admin dn has full write access, everyone else
# can read everything.
access to *
        by dn="uid=admin,dc=mni,dc=pl" write
        by * read

access to dn.base="cn=Subschema" by * read

access to dn.subtree="dc=pl" by * read

access to dn.subtree="ou=fileserver.breakpoint.pl,ou=serwers,ou=groups,dc=mni,dc=pl" by * read
       by dn="uid=adam.nowotny,ou=people,dc=mni,dc=pl" write

access to dn.subtree="ou=BrandyMVNO,ou=people,dc=mni,dc=pl" by * read
       by group="cn=mvnoBrandAdmin,ou=roles,dc=mni,dc=pl" write

access to dn.subtree="cn=zimbra"
by dn.children="cn=admins,cn=zimbra" write