default: TODO: indicate objclass=default as a default rights repo
Same as UpdateAccess except for DEFAULT access control system
TODO: replace with GrantAccess API, to become command like GRANT REVOKE ... with empty access rights string
default: TODO: indicate objclass=default as a default rights repo