[Freeipa-users] limit access to a specific CN

[Peter Doherty]

Hello,  I'm running Fedora 14 and freeipa 1.2.2-6


Can I create a new cn/nsContainer (cn=subgroup,dc=example,dc=com)
and then create an account that can edit that cn as much as they want,  
but can't edit the other ones (ie: accounts, groups...)?
Any pointers to documentation would be useful.  Unfortunately I'm not  
100% clear on my terminology, so google searches are leading me a bit  
astray.

Thanks,
Peter