if ( userName.toNormName().equals( PartitionNexus.ADMIN_PRINCIPAL_NORMALIZED ) || !enabled )
if ( isPrincipalAnAdministrator( principalDn ) || !enabled )
    public boolean compare( NextInterceptor next, LdapDN name, String oid, Object value ) throws NamingException    {        // Access the principal requesting the operation, and bypass checks if it is the admin        Invocation invocation = InvocationStack.getInstance().peek();        PartitionNexusProxy proxy = invocation.getProxy();        Attributes entry = proxy.lookup( name, PartitionNexusProxy.LOOKUP_BYPASS );        LdapPrincipal principal = ( ( ServerContext ) invocation.getCaller() ).getPrincipal();        LdapDN userName = principal.getJndiName();        if ( userName.toNormName().equals( PartitionNexus.ADMIN_PRINCIPAL_NORMALIZED ) || !enabled )        {            return next.compare( name, oid, value );        }        Set userGroups = groupCache.getGroups( userName.toNormName() );        Collection tuples = new HashSet();        addPerscriptiveAciTuples( proxy, tuples, name, entry );        addEntryAciTuples( tuples, entry );        addSubentryAciTuples( proxy, tuples, name, entry );        engine.checkPermission( proxy, userGroups, userName, principal.getAuthenticationLevel(), name, null, null,            READ_PERMS, tuples, entry );        engine.checkPermission( proxy, userGroups, userName, principal.getAuthenticationLevel(), name, oid, value,            COMPARE_PERMS, tuples, entry );        return next.compare( name, oid, value );    }