Add support for subordinate subtree to ACI.

coulbeck

12.22.2007 6f188eb41717d3783b41cdfa862e2b66ac35e580

 opendj-sdk/opends/src/server/org/opends/server/authorization/dseecompat/UserDN.java

@@ -343,6 +343,12 @@
            DN parent=evalCtx.getClientDN().getParent();
            if((parent != null) && !parent.equals(urlDN))
                return EnumEvalResult.FALSE;
        } else if(scope == SearchScope.SUBORDINATE_SUBTREE) {
            DN userDN = evalCtx.getClientDN();
            if ((userDN.getNumComponents() <= urlDN.getNumComponents()) ||
                 !userDN.isDescendantOf(urlDN)) {
              return EnumEvalResult.FALSE;
            }
        } else {
            if(!evalCtx.getClientDN().equals(urlDN))
                return EnumEvalResult.FALSE;