LdapRealm - wrong behavior of {0} wildcard on role-recursion

Wildcard "{0}" is replaced by username in filter-name in filtering attribute mapping.

It is correct for search of identity roles, but wrong for search roles of role - on role-recursion. In such case it should be replaced by name of that role.