Add Group to the list of items an Authenticate action can occur on

[burnalting]

Refer to issue #13

[at055612]

This feels to me more like Authorisation than Authentication. Once linux has established who is logging on it can authorise that identity against any groups/roles.

[stroomdev10]

We don't currently log the Authorisation as a separate action, we log the action and the reason why it was allowed.

We use Authorise to model changes in Authorisation policies.

So I'm OK with this

[burnalting]

This activity is not Authorising a user to be added to a Group (ie AddGroups), that activity has already occurred, this is when the user Authenticates to the group (aka setgid and friends system calls). This is to parallel when one Authenticates to a user (aka setuid and friends). Basically a setgid() system call is a Authenticate event of type 'ElevatePrivilege' to the given Group (not user).

[stroomdev66]

This makes sense.