Fixes #5397 Use a separate ACL for account locking

plugins/admin/users/class_userManagement.inc

@@ -143,7 +143,7 @@ class userManagement extends simpleManagement
     $disallowed = array();
     $allowed    = array();
     foreach ($entry as $dn) {
-      if (!preg_match('/w/', $ui->get_permissions($dn, 'user/user', 'userPassword'))) {
+      if (!preg_match('/w/', $ui->get_permissions($dn, 'user/user', 'userLock'))) {
         $disallowed[] = $dn;
       } else {
         $allowed[] = $dn;

plugins/personal/generic/class_user.inc

@@ -293,7 +293,10 @@ class user extends simplePlugin
         'manager' => array('user','dn')
       ),
 
-      'plProvidedAcls' => parent::generatePlProvidedAcls(static::getAttributesInfo())
+      'plProvidedAcls' => array_merge(
+        parent::generatePlProvidedAcls(static::getAttributesInfo()),
+        array('userLock' => _('User lock status'))
+      )
     );
   }