midpoint.getParentOrgs vs. end user

if user change his password over self service, midpoint.getParentOrgs(user, (javax.xml.namespace.QName) null, 'type') return empty result instead of his parent org as returned for superuser.
User has customized end user role authorization, see attachement