Using base scope in ACL does not work as expected

Description

Hello,

It looks like the aclrole as base not work like expected. When we assigned an aclrole on "." we can read the users in ou=people

Distribution Name and Version

Debian

FusionDirectory Version

1.3

PHP version used

php7

Origin of php packages

Distribution

Steps to Reproduce

1. Create department /A and /B/A
2. Assign the manager aclrole to a user (subtree for /A and /B/A) but as base for "."
3. If you connect with your user you can see the users in "." and you can also write in /B

Expected behavior:

We cannot see the users in "." and we may not write in /B

Actual behavior:

We see the user in "." an we can write in /B

Reproduces how often: 100%