https://bugs.openldap.org/show_bug.cgi?id=8182
--- Comment #2 from Ondřej Kuzník ondra@mistotebe.net --- Dealing with this would need access to the attribute type in the other set we're joining with so the literal 'canBrowse' could be normalised accordingly.
But the way set ACLs are parsed at the moment, there is no way to keep and propagate this information. We might have to turn to a parser generator to get an AST and annotate accordingly if this is needed. That would in turn make us require YACC or whatever we chose.