Comment # 9 on bug 1165461 from Gerhard Roland

sorry not going to the red hat user list. But these problems seem to be suse
specific.
For RH is is described in 
https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.1/html/Administration_Guide/Viewing_the_ACIs_for_an_Entry-Get_Effective_Rights_Control.html
hos to get effective right. In the leap implementation this does not work -
presumingly as the OID 1.3.6.1.4.1.42.2.27.9.5.2 does not exist in any schema
included in /usr/share/dirsrv/share.
Nor does the following ldif have any effect on query by the user
cn=quest,dc=host1,dc=groland,dc=de:

aci:
(target=ldap:///o=hosting,dc=host1,dc=groland,dc=de)(targetattr=*)(versioen
3.0;acl "name1";allow(read,search)
userdn="ldap:///cn=quest,dc=host1,dc=groland,dc=de";)

Any hint what to do? (I need the quest user for queries from postfix.)