working whith sets

["José M. Fandiño" <ldap@fadesa.es>]

Dear friends,

How I can permit write access to entries with an attribute 
value by others with other attribute value.
 
i.e:

permit write access to entries with a "staff" role by
entries with an "admin" role.

access to dn.subtree="ou=people,dc=domain"
   by set="( this/personRole & [staff]  ) & ( user/personRole & ([admin]|[bofh]) )" write

I did several tests but none of them worked.

is it possible with sets?

Thank you.
-- 
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS/IT d- s+:+() a C+++ UBL+++$ P+ L+++ E--- W++ N+ o++ K- w---
O+ M+ V- PS+ PE+ Y++ PGP+>+++ t+ 5 X+$ R- tv-- b+++ DI D++>+++
G++ e- h+(++) !r !z
------END GEEK CODE BLOCK------