The Default ACP entry contains the access rules that are used if you do not add any other ACPs. This entry is located in the root of your Directory server. You should modify this entry to grant the minimal amount of access to clients.
This pane displays two sections: Structural Access Items and Content Access Items.
Items in the Structural Access Items section grant access to clients wanting to view or modify the structure (that is, the entries) of the Directory.
Items in the Content Access Items section grant access to clients that want to view or modify the content of entries (that is, the attributes).
You can add, modify, and delete items in both of these sections.
To modify the component parts of an existing item in either section, click it and click Edit.
To add another item (ACI) to the Default ACP, click Create below that section.
To delete an access item in either section, select it and click Delete below that section.
To add another ACP lower in the DIT, click Create or Create Like at the bottom of the pane.