Index: src/main/java/org/apache/directory/server/core/authz/OldAuthorizationService.java =================================================================== --- src/main/java/org/apache/directory/server/core/authz/OldAuthorizationService.java (Revision 395798) +++ src/main/java/org/apache/directory/server/core/authz/OldAuthorizationService.java (Arbeitskopie) @@ -442,18 +442,19 @@ private boolean isSearchable( Invocation invocataion, SearchResult result ) throws NamingException { Name dn; + Name principalDn = ( ( ServerContext ) invocataion.getCaller() ).getPrincipal().getJndiName(); synchronized ( dnParser ) { dn = dnParser.parse( result.getName() ); + principalDn = dnParser.parse( principalDn.toString() ); } - - Name principalDn = ( ( ServerContext ) invocataion.getCaller() ).getPrincipal().getJndiName(); + if ( !principalDn.equals( ADMIN_DN ) ) { if ( dn.size() > 2 ) { - if ( dn.startsWith( USER_BASE_DN ) || dn.startsWith( GROUP_BASE_DN ) ) + if ( ( dn.startsWith( USER_BASE_DN ) && ( !dn.equals( principalDn ) )) || dn.startsWith( GROUP_BASE_DN ) ) { return false; }