It would appear that no read ACI was created for cn=compat which makes it unusable for a non-admin user.
Admins have access to the tree by the "Admins can manage any entry" ACI.
See http://www.redhat.com/archives/freeipa-devel/2014-September/msg00047.html for initial proposal.
ipa-4-0:
master:
ipa-4-1:
This is part of 4.0.2 - moving to right milestone.
Metadata Update from @rcritten: - Issue assigned to pviktori - Issue set to the milestone: FreeIPA 4.0.2
Login to comment on this ticket.