Allow to delegate modify account commands to non administrators Currently only administrators groups allow to modify accounts. This is impractical on very big installations. Add modify account global capability and allow administrators to optionally delegate this job. Bug: Issue 2786 Change-Id: Icc105c39e76908a075e89ec14921972b91866dd4
diff --git a/Documentation/access-control.txt b/Documentation/access-control.txt index 8ff2eb6..2f92714 100644 --- a/Documentation/access-control.txt +++ b/Documentation/access-control.txt
@@ -1208,6 +1208,12 @@ a replication task or a user initiated task such as an upload-pack or receive-pack. +[[capability_modifyAccount]] +=== Modify Account + +Allow to link:cmd-set-account.html[modify accounts over the ssh prompt]. +This capability allows the granted group members to modify any user account +setting. [[capability_priority]] === Priority
