[Freeipa-devel] [freeipa PR#1426][opened] ACI: grant access to admins group instead of admin user

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/1426
Author: flo-renaud
 Title: #1426: ACI: grant access to admins group instead of admin user
Action: opened

PR body:
"""
The ACI needed for staged users and deleted users were granted
only to the uid=admin user. They should rather be granted to
cn=admins group, to make sure that all members of the admins
group are able to call the command ipa user-del --preserve.

https://pagure.io/freeipa/issue/7342
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1426/head:pr1426
git checkout pr1426