Matthias Förste foerste@schlittermann.de [Tue, 13 Dec 2011 22:47:23 +0100] rev 69
aclgroup names should be supplied with leading '$' for consistency with the acl module: remove them before storing to ldap and add them back when displaying; delete aclgroups attribute only if it is actually set