[Fedora-directory-users] virtual attributes in targetfilter

[George Holbert]

Under recent versions of FDS, is it OK to use virtual attributes (i.e., 
nsRole or CoS-generated) in ACI targetfilters?
In earlier versions of Netscape DS, this was not recommended, and this 
is still mentioned in the RHDS 7.1 docs:

http://www.redhat.com/docs/manuals/dir-server/ag/7.1/acl.html#1013769

However, in testing I haven't seen any problems so far doing this, and 
have noticed examples of it elsewhere, e.g.:

http://www.redhat.com/archives/fedora-directory-users/2005-June/msg00188.html

Are the docs just a little dated on this, or is it still not a good idea?

Thank you!
-- George