s4-dsdb: allow modification of linked attribute targets with relax

[Andrew Bartlett]

On Tue, 2011-03-29 at 08:37 +0200, Stefan (metze) Metzmacher wrote: 
> Hi Tridge,
> 
> > commit daeb6a02eab5822c557ab167fbc171aebe2ddf05
> > Author: Andrew Tridgell <tridge at samba.org>
> > Date:   Tue Mar 29 16:14:18 2011 +1100
> > 
> >     s4-dsdb: allow modification of linked attribute targets with relax
> >     
> >     this is used to help recover a corrupt database.
> >     
> >     Pair-Programmed-With: Andrew Bartlett <abartlet at samba.org>
> 
> Can we change that, so that's it's only allowed as SYSTEM?

We probably need to ensure that RELAX is only available as system or
something like that (but we use this control to permit other dubious
modifications that some tests need to trigger certain behaviours). 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.