Document URL: 
https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/managing_access_control#Access_Control_Principles-ACI_Placement



Section Number and Name: 
14.1.2. ACI Placement
> If an entry containing an ACI does not have any child entries, the ACI
> applies to that entry only. If the entry has child entries, the ACI
> applies to the entry itself and all entries below it. As a direct
> consequence, when the server evaluates access permissions to any given
> entry, it verifies the ACIs for every entry between the one requested
> and the directory suffix, as well as the ACIs on the entry itself. 



Suggestions for improvement: 
Add an example.