Admin rights needed to use the widget ?

Hi Alain! I'm attaching a super preliminary patch that my awesome coworker wrote -- she doesn't have the time to contribute it back thru the proper channels (yet!), but I figured you might like to have it for your own use in the meantime (and anyone else) -- and/or maybe someone else will want to improve it, etc.

EDIT: Oh yeah, there's another reason we weren't going to share it yet, it's based on our copy of the module, which is patched with another local patch related to dn/cn things. Sorry, folks! So I'm removing the file, but here's the file contents, in case it can help you (don't want to give ppl the wrong idea by having a file ending with .patch attached to this issue):

diff --git a/sites/all/modules/contrib/ldap_entry_reference/ldap_entry_reference.module b/sites/all/modules/contrib/ldap_entry_reference/ldap_entry_reference.module
index e8d9162..93c0a51 100644
--- a/sites/all/modules/contrib/ldap_entry_reference/ldap_entry_reference.module
+++ b/sites/all/modules/contrib/ldap_entry_reference/ldap_entry_reference.module
@@ -287,13 +287,24 @@ function ldap_entry_reference_field_is_empty($item, $field) {
 }
 
 /**
+ * Implements hook_permission().
+ */
+function ldap_entry_reference_permission() {
+  return array(
+    'edit ldap_entry_reference field' => array(
+      'title' => t('edit ldap_entry_reference field'),
+    )
+  );
+}
+
+/**
  * Implements hook_field_access()
  * - Control access to ldap entry fields with same permission as "admin/config/people/ldap"
  */
 function ldap_entry_reference_field_access($op, $field, $entity_type, $entity, $account) {
   if ($field['type'] == 'ldap_entry_reference') {
     if ($op == 'edit') {
-      return user_access('administer site configuration', $account);
+      return user_access('edit ldap_entry_reference field', $account);
     }
   }
 }