It was always the intention to restrict LDAP overrides to the
owner. During implementation it was allowed for masters mistakenly.
Now we are restricting this action to owners, to match the behavior
that only owners can manage LDAP group links, too.