access to dn="cn=portal,cn=univention,@%@ldap/base@%@" attrs=children
	by dn.onelevel="cn=dc,cn=computers,@%@ldap/base@%@" write
	by dn.onelevel="cn=memberserver,cn=computers,@%@ldap/base@%@" write
	by * +0 break

access to dn.children="cn=portal,cn=univention,@%@ldap/base@%@" attrs=entry,@univentionObject,@univentionPortalEntry,@univentionPortal
	by dn.onelevel="cn=dc,cn=computers,@%@ldap/base@%@" write
	by dn.onelevel="cn=memberserver,cn=computers,@%@ldap/base@%@" write
	by * +0 break
