We're running 389-Directory/1.3.9.0 B2018.304.1940.

Is it possible via ACIs to restrict read/search permission on attributes with a particular value?

My use case is that we have an "isMemberOf" attribute in our directory, and we have some group memberships that are of a sensitive nature. I would like to have all "isMemberOf" attribute values *except* for these sensitive ones readable/searchable to all authenticated user DNs, and the "sensitive" ones only readable/searchable by a particular user DN.

Any ideas? From reading the Red Hat directory server ACI documentation, I can't find a way to do this.

Thanks in advance,

--Gary