I wrote this article a couple years back to deal with the fact that Novell's
RBS grants excessive rights to the tree. I specifically wrote it for the
"Check Password Status" function.

See the section called "Fix and recommendations" (or something like that)

I implemented this again today and it does not work. I can't get my
non-admin users to see the check password status unless I scope my plugin at
ROOT, and leave the S in place.
Has something changed in eDir, or in the rights required to run Check
Password Sync Status?