Permissions

Here you can see which user can do what.

Create/Delete User

1. Root
2. Admin

Update User

1. Root
2. Admin
3. DB_Users can change own password

Create Team

Every User can create a new Team

Update Team

1. Teammember
2. Teamadmin

Delete Team

1. Admin
2. Root

Root and Admin can also delete teams if they are no Teammember

Add/Remove Teammember

1. Teammember
2. Teamadmin

Create/Delete/Update Group

1. Teammember
2. Teamadmin

Create/Delete/Update Account

1. Teammember
2. Teamadmin

User Model	Actions	Attributes	Admin	Conf Admin	User
	Create		x	x
	Delete		x	x (only non-admins or admins whose LDAP has been deleted
	Edit	Firstname	x	x (only of non-admins)
		Lastname	x	x (only of non-admins)
		Username	x
		Password	x
	Make Admin		x
	Make ConfAdmin		x	x
	Unlock		x	x

Team Model	Actions	Admin	Conf Admin	User	Api User	Any Role if Teammember
public
	List in admin/teams	x	x
	Create	x				x
	Delete	x	x (only if there's just one user left)
	Add member	x				x
	Remove Member	x				x
	Add Group	x				x
	Edit Group	x				x
	Remove Group	x				x
private
	List in admin/teams	x	x
	Create					x
	Delete	(x)	x (only if there's just one user left)			x
	Add member					x
	Remove Member					x
	Add Group					x
	Edit Group					x
	Remove Group					x
	Show Team				if enabled for team and user human teammember	x
	Show Group				if enabled for team and user human teammember	x
	Show Account				if enabled for team and user human teammember	x

Account Model	Actions	Any Role if Teammember
	Create	x
	Delete	x
	Update	x
	Move	x

Admin Tasks			Admin	Conf Admin	User
	Change Password		x	x	x
	Settings	Update	x	x
	Recrypt Requests
		Send	x		x
		Receive/Handle	x
	Maintenance Tasks
		Set root as admin	x
		New root password	x
		Removed ldap users	x	x