Limitations on Using Access Control Rules

The main limitations on using Access control rules are as follows:

Access control rules are defined on named entries, subtrees or attributes. If you rename these items, then the access control rule no longer protects those items.
If you deny access to a naming attribute and do not deny access to entries lower down in the tree, then the naming attribute is still visible.
Access controls are effective only when you enable access controls.