Index: univention-management-console-module-appcenter/ldap/66univention-appcenter_app.acl
===================================================================
--- univention-management-console-module-appcenter/ldap/66univention-appcenter_app.acl	(Revision 45173)
+++ univention-management-console-module-appcenter/ldap/66univention-appcenter_app.acl	(Arbeitskopie)
@@ -12,7 +12,7 @@
 	by group/univentionGroup/uniqueMember="cn=Member-Verwaltungsnetz,cn=ucsschool,cn=groups,%(base)s" write
 	by * read break
 
-access to dn.regex="^cn=([^,]+),cn=apps,cn=univention,%(base)s$" attrs=children,entry
+access to dn.regex="^cn=([^,]+),cn=apps,cn=univention,%(base)s$" attrs=children,entry filter="(objectClass=univentionApp)"
 	by dn.onelevel="cn=dc,cn=computers,%(base)s" write
 	by dn.onelevel="cn=memberserver,cn=computers,%(base)s" write
 	by group/univentionGroup/uniqueMember="cn=DC-Edukativnetz,cn=ucsschool,cn=groups,%(base)s" write
@@ -21,7 +21,7 @@
 	by group/univentionGroup/uniqueMember="cn=Member-Verwaltungsnetz,cn=ucsschool,cn=groups,%(base)s" write
 	by * read break
 
-access to dn.regex="^cn=apps,cn=univention,%(base)s$" attrs=children,entry
+access to dn.exact="cn=apps,cn=univention,%(base)s" attrs=children,entry
 	by dn.onelevel="cn=dc,cn=computers,%(base)s" write
 	by dn.onelevel="cn=memberserver,cn=computers,%(base)s" write
 	by group/univentionGroup/uniqueMember="cn=DC-Edukativnetz,cn=ucsschool,cn=groups,%(base)s" write