Hello,
To be backward compatible the processing of 'moddn' aci should be disabled by default. So 'add' permission will still allow to moddn an entry under the target subtree. New 'moddn' permission in aci will be supported (aci not rejected) but not enforced during moddn.
thanks thierry
https://fedorahosted.org/389/ticket/47553
https://fedorahosted.org/389/attachment/ticket/47553/0001-Ticket-47553-Enhan...
389-devel@lists.fedoraproject.org