Click Access Rights to grant or deny Read, Search, Write, Selfwrite, or Compare access.
Select the rights you want to grant by clicking the appropriate boxes.
Read
Access allows the subject to read the attribute values. (Browse
access to the entry must also be granted.)
Search
access allows the right to use the attribute in a search filter.
Write
access allows the subject to change or delete the value of the attribute.
Selfwrite
access allows the right to modify, add, or delete ones own
value in an attribute. For example, members of a group could remove
themselves from the group.
Compare
access allows the LDAP Compare operation on the attribute.
You can grant these rights or you can explicitly deny these rights. If you leave a right unspecified, the right will be determined by ACPs higher in the DIT.
When you have finished entering data in all the Content Access pages, click OK to save your choices and close the window. Your entries appear in the New Access Control Point window.