<what> in ACL defined by set?

HI!

Is it possible to specify the <what> clause in an ACL with a set?

We have several applications and for each application there's a specific AUXILIARY object class for application-specific user attributes.

So for each application I add ACLs like this:

access to dn.onelevel="ou=Users,dc=example,dc=org" attrs=@app1User by dn.subtree="cn=app1,ou=Systems,dc=example,dc=org" read by * break

Obviously I'd like to have one ACL which references an attribute specifying the auxiliary object class in the app's system entry. Is that possible?

Ciao, Michael.