I was quite surprised not to find a filter bind rule (we have filtered targets for example). I wanted to use this because I am using a grouping entry that is not supported by DS in aci's, so I am writing a memberof plugin to have the membership available in an attribute - but no bind rule to directly use the memberof attribute in the aci, I will have to use a shadow dynamic group just to get access control based on my original group. This feature would be generally useful I think.
Of course, as soon as I click commit I spot a line of text in the docs...
Bug already CLOSED. setting screened+ flag