opendj3-server-dev/src/server/org/opends/server/authorization/dseecompat/UserDN.java
@@ -322,7 +322,7 @@ DN parent=evalCtx.getClientDN().parent(); if((parent != null) && !parent.equals(urlDN)) return EnumEvalResult.FALSE; } else if(scope == SearchScope.SUBORDINATE_SUBTREE) { } else if(scope == SearchScope.SUBORDINATES) { DN userDN = evalCtx.getClientDN(); if ((userDN.size() <= urlDN.size()) || !userDN.isDescendantOf(urlDN)) {