createAccessControlSubentry( "anybodyAdd", "{ " + "identificationTag \"addAci\", " +
createAccessControlSubentry( "anybodySearch", "{ " + "identificationTag \"searchAci\", " +
    public void testGrantSearchAllUsers() throws NamingException    {        // create the non-admin user        createUser( "billyd", "billyd" );        // try an add operation which should fail without any ACI        assertFalse( checkCanSearchAs( "billyd", "billyd" ) );        // now add a subentry that enables anyone to add an entry below ou=system        createAccessControlSubentry( "anybodyAdd", "{ " +                "identificationTag \"addAci\", " +                "precedence 14, " +                "authenticationLevel none, " +                "itemOrUserFirst userFirst: { " +                "userClasses { allUsers }, " +                "userPermissions { { " +                "protectedItems {entry, allUserAttributeTypesAndValues}, " +                "grantsAndDenials { grantRead, grantReturnDN, grantBrowse } } } } }" );        // see if we can now add that test entry which we could not before        // should work now with billyd now that all users are authorized        assertTrue( checkCanSearchAs( "billyd", "billyd" ) );    }