{
  "config": {
    "type": "object",
    "$ref": "module://@nikitajs/ldap/search#/definitions/connection",
    "properties": {
      "acls": {
        "type": "array",
        "coercion": true,
        "description": "In case of multiple acls, regroup \"place_before\", \"to\" and \"by\" as an\narray.",
        "items": {
          "type": "object",
          "properties": {
            "by": {
              "type": "array",
              "coercion": true,
              "items": {
                "type": "string"
              },
              "description": "Who to grant access to and the access to grant as an array (eg:\n`{..., by:[\"ssf=64 anonymous auth\"]}`)."
            },
            "first": {
              "type": "boolean",
              "description": "Please ACL in the first position."
            },
            "place_before": {
              "type": "string",
              "description": "Place before another rule defined by \"to\"."
            },
            "to": {
              "type": "string",
              "description": "What to control access to as a string."
            }
          }
        }
      },
      "dn": {
        "type": "string",
        "description": "Distinguish name storing the \"olcAccess\" property, using the database\naddress (eg: \"olcDatabase={2}bdb,cn=config\")."
      },
      "suffix": {
        "type": "string",
        "description": "The suffix associated with the database (eg: \"dc=example,dc=org\"),\nused as an alternative to the `dn` configuration."
      }
    },
    "required": [
      "acls"
    ]
  }
}