To use the Name Service Interface (NSI) routines to access entries
   in a Cell Directory Service (CDS) database, you need Access Control
   List (ACL) permissions.  Depending on the NSI operation, you need
   ACL permissions to the parent directory or the CDS object entry
   (the name service entry) or both.

   The ACL permissions are as follows:

     +  To create an entry, you need insert permission to the parent
        directory.

     +  To read an entry, you need read permission to the CDS object
        entry.

     +  To write to an entry, you need write permission to the CDS
        object entry.

     +  To delete an entry, you need delete permission either to the
        CDS object entry or to the parent directory.

     +  To test an entry, you need either test permission or read
        permission to the CDS object entry.

   Note that write permission does not imply read permission.

   To find the ACL permissions for the NSI routines whose names begin
   with rpc_ns, see these routines' reference pages.

   The non-NSI routines whose names do not begin with rpc_ns do not
   need ACL permissions, so their reference pages do not specify any.