To be backward compatible the processing of 'moddn' aci should be disabled by default. So 'add' permission will still allow to moddn an entry under the target subtree.
New 'moddn' permission in aci will be supported (aci not rejected) but not enforced during moddn.

thanks
thierry

https://fedorahosted.org/389/ticket/47553

https://fedorahosted.org/389/attachment/ticket/47553/0001-Ticket-47553-Enhance-ACIs-to-have-more-control-over-.4.patch