Under recent versions of FDS, is it OK to use virtual attributes (i.e., nsRole or CoS-generated) in ACI targetfilters? In earlier versions of Netscape DS, this was not recommended, and this is still mentioned in the RHDS 7.1 docs:

http://www.redhat.com/docs/manuals/dir-server/ag/7.1/acl.html#1013769

However, in testing I haven't seen any problems so far doing this, and have noticed examples of it elsewhere, e.g.:

http://www.redhat.com/archives/fedora-directory-users/2005-June/msg00188.htm...

Are the docs just a little dated on this, or is it still not a good idea?

Thank you! -- George