Having a local password is needed to make changing passwords easier. In
order to catch password changes in a universal way and forward them to
backends (like LDAP, in this case), getting the old password first is
necessary to authenticate as that user to LDAP.

We buy the small insecurity of having a hash of the password in the
Django database in order to not require it to have global admin permissions
on the LDAP directory.

In addition, we fail early by raising PermissionDenied if LDAP cannot
authenticate the user, so as to not allow logins with ghost users that
were removed in LDAP or changed their password there.

Some JS and CSS were added, too.

Add functionality to modify object level permissions for group and person objects in admin interface

Currently translated at 100.0% (439 of 439 strings)

Translation: AlekSIS/AlekSIS-Core
Translate-URL: https://translate.edugit.org/projects/aleksis/aleksis/de/

Nik | Klampfradler authored 4 years ago and Tom Teichler committed 4 years ago

This ensures that tasks are not created before any private keys have been saved and commited.