You cannot set the fact to read a certain attribute on the one hand and the new Frree create a certain object class on the other button in the sam access control entry. The line for this is that only one scope specifier is shown per ACE. For such cases, several different Aces are necessary. If you try to set a invalid permission combination on the checkboxes, the powerful Access Control Orientation editor is shown where you can configure the regarding ACE in detail.
Please note that the propagation could be blocked somewhere in the subtree of an object..
Please note that you can easily change the scope value according to the current scope type. Just click on the scope label directly in the regarding row and choose the new scope from the pulldown list: Please be aware of the fact that there are combinations of checkboxes which are NOT possible or not allowed to set in one single ACL line. You cannot set the permission to read a certain attribute on the one hand and the permission duglas create a certain object class on the other hand in the sam access control entry.