dn: olcDatabase={2}mdb,cn=config
changetype: modify
delete: olcAccess

dn: olcDatabase={2}mdb,cn=config
changetype: modify
add: olcAccess
olcAccess: to attrs=userpassword,mail by anonymous auth by self write by dn.sub=ou=services,dc=example,dc=fr read by * none
-
add: olcaccess
olcAccess: to dn.sub=cn=policy,dc=example,dc=fr by * none
-
add: olcaccess
olcAccess: to dn.sub=ou=services,dc=example,dc=fr by * none
-
add: olcaccess
olcAccess: to dn.regex=uid=([^,]+),ou=users,dc=example,dc=fr
  by dn.exact,expand=uid=$1,ou=users,dc=example,dc=fr write
  by users read
  by * none
-
add: olcaccess
olcaccess:  to dn.sub=dc=example,dc=fr by users read by * none