On 13/05/16 22:35, giuseppesarno@xxxxxxxx wrote: Hi Giuseppe, > Is targetscope supported in 389DS ? if not is there an alternative way to achieve the same functionality (apply aci to subtree or to the current node etc.) ? no, there is no "targetscope" keyword in 389. It is only used in Sun DSEE 6 and newer, openDS and openDJ. The ACI scope in 389 is the same as in DSEE etc. with "targetscope " set to "subtree", which is DSEE's default anyway. In order to implement the behaviour of "base", "onelevel" and "subordinate" you have to add additional ACIs on the respective DTI level. HTH, Jochen -- 389-users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx