Missing delegation UI with remote account provider

[stephdl]

Steps to reproduce

• Bound a Nethserver 7 to a remote authentificator, openldap or Samba AD
• You can delegate some permissions on the server running the user account provider
• You cannot delegate on the bound server because the group field in the user/group panel is not editable.

Expected behavior

The storage of permission is local on the server, under cockpit.socket{'delegations'}, I expect that on the bound server I could delegate some permissions to the groups I want like I could do when the server gets an account provider locally

Actual behavior

The bound server cannot be delegated, only members of domain admins group and root can do most of everything

Components

nethserver-cockpit

Additional information

The current authorize group screenshot:

[nethbot]

in 7.7.1908/testing:

• nethserver-cockpit-1.4.1-1.6.g65c8095.ns7.noarch.rpm x86_64 armhfp aarch64
• nethserver-cockpit-lib-1.4.1-1.6.g65c8095.ns7.noarch.rpm x86_64 armhfp aarch64

[stephdl]

QA

The test must be done between two servers with a local and a remote authentication, the goal is to have a separated modal for delegation_edit and group_edit/creation.

• on local authentication the button is under the kebab widget
• on remote authentication the button is visible on the group list

all group creation/edit and delegation edit must be workable

[DavidePrincipi]

It seems there's still "Terminal" displayed among the system modules for group "Domain Admins". Can we remove it?

⚠️ The wording Make sure delegated users have the "Shell" option enabled. should be removed with the new ShellOverrideStatus=enabled. We can remove it here IMO, unconditionally. What do you think @gsanchietti @stephdl ?

[stephdl]

Until the option is not available in the UI, or a default option for every body it will lead to issue. Even for the admin user it raises from time to time some questions on the community

But here now the message must be

Make sure delegated users have the "Shell" option enabled or the shell override enabled.

[nethbot]

in 7.7.1908/testing:

• nethserver-cockpit-1.4.1-1.8.g38c83ef.ns7.noarch.rpm x86_64 armhfp aarch64
• nethserver-cockpit-lib-1.4.1-1.8.g38c83ef.ns7.noarch.rpm x86_64 armhfp aarch64

[stephdl]

• Reminder to push translations

[nethbot]

in 7.7.1908/testing:

• nethserver-cockpit-1.4.1-1.9.g85ad37f.ns7.noarch.rpm x86_64 armhfp aarch64
• nethserver-cockpit-lib-1.4.1-1.9.g85ad37f.ns7.noarch.rpm x86_64 armhfp aarch64

[DavidePrincipi]

VERIFIED

The new dialog is available with both local and remote accounts provider.

Tested with OpenLDAP.

[nethbot]

in 7.7.1908/updates:

• nethserver-cockpit-1.4.2-1.ns7.noarch.rpm x86_64 armhfp aarch64
• nethserver-cockpit-lib-1.4.2-1.ns7.noarch.rpm x86_64 armhfp aarch64