Problem reported by Hagfors kommun. tl-desktop-activate.sh does not activate TLDC for the root user. This is useful, since it allows root to use control panels etc. On Ubuntu, however, you do not normally login as root, but rather as another user, and then use su/sudo. This means that the root exclusion does not work. And even though you can "sudo" (and with some luck, be able to use X11 applications), you cannot run KDE control applets, since these requires that the user have access to the .desktop files.
I have no idea on how to solve this. In theory, it should be possible to parse /etc/sudoers and /etc/group to verify if the user "can" sudo, but that doesn't necessarily mean that this user shouldn't have TLDC activated.
At the devmeeting 2007-05-02, there was a consensus about adding a Hiveconf variable for "TLDC exclusions".