Various embodiments of systems and methods for implementing filter-based
attribute value access control are disclosed. In one embodiment, a method involves
designating a location in the directory server, providing attribute related data
that includes a filter expression, and selectively controlling access to an entry
situated at the designated location using the filter expression in the attribute
related data. For example, access to an attribute of the entry may be denied if
a criterion defined by the filter expression associated with the attribute is not
met by a first value of the attribute.