Fix for Bug#4281 provided by Monyo.

(This used to be commit d3e704efa40d973206498be1ead03da095f65128)

3 files changed, 70 insertions, 60 deletions

diff --git a/docs/smbdotconf/misc/addsharecommand.xml b/docs/smbdotconf/misc/addsharecommand.xml
index 9773bf60d6..9eb50f3dc3 100644
--- a/docs/smbdotconf/misc/addsharecommand.xml
+++ b/docs/smbdotconf/misc/addsharecommand.xml
@@ -4,43 +4,45 @@
                  advanced="1" developer="1"
                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 <description>
-	<para>Samba 2.2.0 introduced the ability to dynamically 
-	add and delete shares via the Windows NT 4.0 Server Manager.  The 
-	<parameter moreinfo="none">add share command</parameter> is used to define an 
-	external program or script which will add a new service definition 
-	to <filename moreinfo="none">smb.conf</filename>.  In order to successfully 
-	execute the <parameter moreinfo="none">add share command</parameter>, <command moreinfo="none">smbd</command>
-	requires that the administrator be connected using a root account (i.e. 
-	uid == 0).
+	<para>
+	Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
+	Manager.  The <parameter moreinfo="none">add share command</parameter> is used to define an external program
+	or script which will add a new service definition to <filename moreinfo="none">smb.conf</filename>.  In order
+	to successfully execute the <parameter moreinfo="none">add share command</parameter>, <command
+	moreinfo="none">smbd</command> requires that the administrator be connected using a root account (i.e.  uid == 0).
 	</para>
-		
+
+    <para>
+    If the connected account has <literal>SeDiskOperatorPrivilege</literal>, scripts defined in
+    <parameter moreinfo="none">change share</parameter> parameter are executed as root.
+    </para>
+
 	<para>
-	When executed, <command moreinfo="none">smbd</command> will automatically invoke the 
+	When executed, <command moreinfo="none">smbd</command> will automatically invoke the
 	<parameter moreinfo="none">add share command</parameter> with five parameters.
 	</para>
-		
+
 	<itemizedlist>
 		<listitem>
-			<para><parameter moreinfo="none">configFile</parameter> - the location 
-			of the global <filename moreinfo="none">smb.conf</filename> file. 
+			<para><parameter moreinfo="none">configFile</parameter> - the location of the global <filename
+			moreinfo="none">smb.conf</filename> file.
 			</para>
 		</listitem>
-			
+
 		<listitem>
-			<para><parameter moreinfo="none">shareName</parameter> - the name of the new 
-			share.
+			<para><parameter moreinfo="none">shareName</parameter> - the name of the new share.
 			</para>
 		</listitem>
-			
+
 		<listitem>
 			<para><parameter moreinfo="none">pathName</parameter> - path to an **existing**
 			directory on disk.
 			</para>
 		</listitem>
-			
+
 		<listitem>
-			<para><parameter moreinfo="none">comment</parameter> - comment string to associate 
-			with the new share.
+			<para><parameter moreinfo="none">comment</parameter> - comment string to associate with the new
+			share.
 			</para>
 		</listitem>
 
@@ -52,10 +54,10 @@
 			</para>
 		</listitem>
 	</itemizedlist>
-		
+
 	<para>
-	This parameter is only used for add file shares.  To add printer shares, 
-	see the <smbconfoption name="addprinter command"/>.
+	This parameter is only used for add file shares.  To add printer shares, see the <smbconfoption
+	name="addprinter command"/>.
 	</para>
 </description>
 
diff --git a/docs/smbdotconf/misc/changesharecommand.xml b/docs/smbdotconf/misc/changesharecommand.xml
index 4b65eda7b5..5a42e22559 100644
--- a/docs/smbdotconf/misc/changesharecommand.xml
+++ b/docs/smbdotconf/misc/changesharecommand.xml
@@ -4,42 +4,46 @@
                  advanced="1" developer="1"
                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 <description>
-	<para>Samba 2.2.0 introduced the ability to dynamically 
-	add and delete shares via the Windows NT 4.0 Server Manager.  The 
-	<parameter moreinfo="none">change share command</parameter> is used to define an 
-	external program or script which will modify an existing service definition 
-	in <filename moreinfo="none">smb.conf</filename>.  In order to successfully 
-	execute the <parameter moreinfo="none">change share command</parameter>, <command moreinfo="none">smbd</command>
-	requires that the administrator be connected using a root account (i.e. 
-	uid == 0).
+	<para>
+	Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
+Manager.  The <parameter moreinfo="none">change share command</parameter> is used to define an external
+program or script which will modify an existing service definition in <filename
+moreinfo="none">smb.conf</filename>.  In order to successfully execute the <parameter moreinfo="none">change
+share command</parameter>, <command moreinfo="none">smbd</command> requires that the administrator be
+connected using a root account (i.e. uid == 0).
 	</para>
-		
+
+	<para>
+	If the connected account has <literal>SeDiskOperatorPrivilege</literal>, scripts defined in
+	<parameter moreinfo="none">change share</parameter> parameter are executed as root.
+	</para>
+
 	<para>
-	When executed, <command moreinfo="none">smbd</command> will automatically invoke the 
+	When executed, <command moreinfo="none">smbd</command> will automatically invoke the
 	<parameter moreinfo="none">change share command</parameter> with five parameters.
 	</para>
-		
+
 	<itemizedlist>
 		<listitem>
-			<para><parameter moreinfo="none">configFile</parameter> - the location 
-			of the global <filename moreinfo="none">smb.conf</filename> file. 
+			<para><parameter moreinfo="none">configFile</parameter> - the location
+			of the global <filename moreinfo="none">smb.conf</filename> file.
 			</para>
 		</listitem>
-			
+
 		<listitem>
-			<para><parameter moreinfo="none">shareName</parameter> - the name of the new 
+			<para><parameter moreinfo="none">shareName</parameter> - the name of the new
 			share.
 			</para>
 		</listitem>
-			
+
 		<listitem>
 			<para><parameter moreinfo="none">pathName</parameter> - path to an **existing**
 			directory on disk.
 			</para>
 		</listitem>
-			
+
 		<listitem>
-			<para><parameter moreinfo="none">comment</parameter> - comment string to associate 
+			<para><parameter moreinfo="none">comment</parameter> - comment string to associate
 			with the new share.
 			</para>
 		</listitem>
@@ -52,9 +56,9 @@
 			</para>
 		</listitem>
 	</itemizedlist>
-		
+
 	<para>
-	This parameter is only used modify existing file shares definitions.  To modify 
+	This parameter is only used modify existing file shares definitions.  To modify
 	printer shares, use the &quot;Printers...&quot; folder as seen when browsing the Samba host.
 	</para>
 </description>
diff --git a/docs/smbdotconf/misc/deletesharecommand.xml b/docs/smbdotconf/misc/deletesharecommand.xml
index 1afce2fd24..40eb6495db 100644
--- a/docs/smbdotconf/misc/deletesharecommand.xml
+++ b/docs/smbdotconf/misc/deletesharecommand.xml
@@ -4,37 +4,41 @@
                  advanced="1" developer="1"
                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 <description>
-	<para>Samba 2.2.0 introduced the ability to dynamically 
-	add and delete shares via the Windows NT 4.0 Server Manager.  The 
-	<parameter moreinfo="none">delete share command</parameter> is used to define an 
-	external program or script which will remove an existing service 
-	definition from <filename moreinfo="none">smb.conf</filename>.  In order to successfully 
-	execute the <parameter moreinfo="none">delete share command</parameter>, <command moreinfo="none">smbd</command>
-	requires that the administrator be connected using a root account (i.e. 
-	uid == 0).
+	<para>
+	Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
+	Manager.  The <parameter moreinfo="none">delete share command</parameter> is used to define an external
+	program or script which will remove an existing service definition from
+	<filename moreinfo="none">smb.conf</filename>.  In order to successfully execute the
+	<parameter moreinfo="none">delete share command</parameter>, <command moreinfo="none">smbd</command>
+	requires that the administrator be connected using a root account (i.e.  uid == 0).
 	</para>
-		
+
+    <para>
+    If the connected account has <literal>SeDiskOperatorPrivilege</literal>, scripts defined in
+    <parameter moreinfo="none">change share</parameter> parameter are executed as root.
+    </para>
+
 	<para>
-	When executed, <command moreinfo="none">smbd</command> will automatically invoke the 
+	When executed, <command moreinfo="none">smbd</command> will automatically invoke the
 	<parameter moreinfo="none">delete share command</parameter> with two parameters.
 	</para>
-		
+
 	<itemizedlist>
 		<listitem>
-			<para><parameter moreinfo="none">configFile</parameter> - the location 
-			of the global <filename moreinfo="none">smb.conf</filename> file. 
+			<para><parameter moreinfo="none">configFile</parameter> - the location
+			of the global <filename moreinfo="none">smb.conf</filename> file.
 			</para>
 		</listitem>
-			
+
 		<listitem>
-			<para><parameter moreinfo="none">shareName</parameter> - the name of 
+			<para><parameter moreinfo="none">shareName</parameter> - the name of
 			the existing service.
 			</para>
 		</listitem>
 	</itemizedlist>
-		
+
 	<para>
-	This parameter is only used to remove file shares.  To delete printer shares, 
+	This parameter is only used to remove file shares.  To delete printer shares,
 	see the <smbconfoption name="deleteprinter command"/>.
 	</para>
 </description>