With the new backend API, customers have lost the ability to import data, adding to an existing and populated backend.
Import-ldif append mode was the only way to add data to the Directory Server while keeping some specific read-only operational attribute's values.
Sometime, an Administrator has to sync data from another source and want to keep some of the meta-data such as createTimeStamp, modifyTimeStamp, creatorsName, modifiersName or entryUUID.
The internet-draft LDAP Relax Rules Control defines a control to relax specific LDAP rules and allow such modifications.
ForgeRock Directory Services should support this control and relax some of the LDAP rules when the control is used with update operations.
The use of this control should be restricted to administrators by default.