We have a scenario here where we would like to provide the option of
searching either CN or LastName from object selector for the users in a
workflow request form. The situation we have here is that the user is
able to search any LastName available but he is only able to search his
own CN. Are we missing some sorts of public search/read access rights on
the CN attribute here?