Directory Proxy Server 5.2 uses the ids-proxy-con-forbidden-subtree attribute to specify a subtree of entries to be excluded in any client request. Directory Proxy Server 7.0 provides this functionality with the allowed-subtrees and prohibited-subtrees properties of a request filtering policy. For information on hiding subtrees in this way, see Creating and Configuring a Resource Limits Policy in Sun Directory Server Enterprise Edition 7.0 Administration Guide.
If your subtrees are distributed across different backend servers, you can use the excluded-subtrees property of a data view to hide subtrees. For more information on hiding subtrees in this way, see Excluding a Subtree From a Data View in Sun Directory Server Enterprise Edition 7.0 Reference and To Configure Data Views With Hierarchy and a Distribution Algorithm in Sun Directory Server Enterprise Edition 7.0 Administration Guide.