Red Hat Directory Server ACI with target attribute userPassword, USERDN rule and proxy user denies write for password change operations

Issue

A Red Hat Directory Server (RHDS) access control handling with ACIs that use target attribute userPassword, the USERDN rule, and a proxy user, will not work for password change operations
ACI example:

aci: (targetattr="userPassword")(version 3.0; acl "testmsproxy manager can set passwords";allow(write) userattr="manager#USERDN";)
aci: (targetattr="*")(version 3.0; acl "testmsproxy alow read proxy";allow(proxy) (userdn="ldap:///uid=user1,dc=example");)

Error example:

ldap_modify: Insufficient access
ldap_modify: additional info: Insufficient 'write' privilege to the 'userPassword' attribute of entry 'uid=user1,dc=example'.