pls help: acl to groups

["S.T. Wong" <st@hp735c.csc.cuhk.edu.hk>]

Hello,

I wonder if it possible to apply "group=" rule to the <what> item in acl 
construct like this :

acces to <what> 
	  by <who> <rights>

I think adding some kind of qualifier in dn for this purpose, e.g.

access to dn="uid=.*, status=single, o=.*, c=hk"

but it's inflexible to change dn when someone's status changes.  It's even 
worse when the status (or the categorizing attribute) changes frequently.

Would anyone please help?

Thanks a lot.

-- 
S.T. Wong                           | Email: st-wong@cuhk.edu.hk