From bbf93d01a5dda3e0d514d6db6f479461740e06dd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?F=C3=A9lix=20Pi=C3=A9dallu?= <felix@piedallu.me>
Date: Sun, 28 Jan 2024 12:35:49 +0100
Subject: [PATCH] Handle ldap groups in the manifest

---
 manifest.toml   |  4 ++++
 scripts/upgrade | 12 ------------
 2 files changed, 4 insertions(+), 12 deletions(-)

diff --git a/manifest.toml b/manifest.toml
index 8440ecb..7a47f97 100644
--- a/manifest.toml
+++ b/manifest.toml
@@ -63,6 +63,10 @@ ram.runtime = "50M" # FIXME: replace with an **estimate** minimum ram requiremen
 
     [resources.permissions]
     main.url = "/"
+    # Non-web, LDAP groups
+    teamlead.allowed = "nobody"
+    admin.allowed = "admins"
+    super_admin.allowed = "__ADMIN__"
 
     [resources.apt]
     packages = [
diff --git a/scripts/upgrade b/scripts/upgrade
index 10044a7..a43cf6f 100755
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -23,18 +23,6 @@ if [ "$database" == "sqlite" ]; then
     fi
 fi
 
-# #REMOVEME? if ! ynh_permission_exists --permission="teamlead"; then
-# #REMOVEME? 	ynh_permission_create --permission="teamlead"
-# fi
-
-# #REMOVEME? if ! ynh_permission_exists --permission="admin"; then
-# #REMOVEME? 	ynh_permission_create --permission="admin"
-# fi
-
-# #REMOVEME? if ! ynh_permission_exists --permission="super_admin"; then
-# #REMOVEME? 	ynh_permission_create --permission="super_admin" --allowed="$admin"
-# fi
-
 if [ -z "${registration:-}" ]; then
     registration=0
     ynh_app_setting_set --app="$app" --key=registration --value="$registration"