update acls

ansible-inventory.yml

@@ -51,12 +51,12 @@ all:
         by self write
         by * read
       - >-
-        {3}to dn.children="ou=groups,dc=example,dc=com"
+        {3}to dn.subtree="ou=groups,dc=example,dc=com"
         by dn="cn=uffd,ou=system,dc=example,dc=com" write
         by group="cn=uffd_admin,ou=groups,dc=example,dc=com" write
         by * read
       - >-
-        {4}to dn.children="ou=postfix,dc=example,dc=com"
+        {4}to dn.subtree="ou=postfix,dc=example,dc=com"
         by dn="cn=uffd,ou=system,dc=example,dc=com" write
         by group="cn=uffd_admin,ou=groups,dc=example,dc=com" write
         by * read