issue #6054

Not ideal, vars in userinfo would need a lot of renaming to make it
 easier to understand.

issue #6054

Spotted thanks to new LDAP debug info

issue #6042

issue #5531

issue #5531

This is to avoid hard coded values

issue #5531

This avoids performanance problems and RAM exhaustion.

issue #5531

issue #5531

issue #5531

issue #5531

issue #5531

issue #6024

Also global_is_set to is_set.

issue #6024

LDAP errors shown on login page were a bit too chatty

issue #6001

Handle ppolicy expired password, locked account and must change password
 error codes.
In this first version after changing password you need to log out.

issue #6001

userinfo::loginUser now throws exceptions on failure, webservice code
 will need to be adapted to take them into account as well

issue #6001

This allows to avoid ldap reads from pluglist::load, and should fix a
 crash happenning in index.php when using encrypted password in config
 file.

issue #6015

issue #6001

Moved userinfo related functions as methods in userinfo
Moved ppolicy account expiration check to expired_status method
Split ppolicy fetch in a method so that it can be used by expiration
 warning detection later.

issue #6001

Will be used by servicesManagement so that dashboard can search for
 services attribute without crash.

issue #5967

issue #5956

issue #5955

Basic fixes like identation

issue #5955

issue #5956

Make sure that ; is consistently replaced by _ when searching ACL for
 tagged attribute like userCertificate;binary

issue #5135

This fixes ACL search for plugins configuration attributes and allow to
 get their values through webservice ls method and objects::ls

issue #5888

issue #5135

It was searching in all classes from the same ACL category as the type,
 which feels wrong.
It is now searching in all tabs from the type, which makes more sense.

issue #5135

issue #5854

Moved it to a class which get instanciated in userinfo and keeps the
 size limit status for the current session.

issue #5135

issue #5831

issue #5831

In some cases the user IP change and it’s fine, so remove the security
 check on the IP.

issue #5783

issue #5775

UI will not be perfect but this should work for controlling who can
 create/restore snapshots.
The ACL for seeing snapshots is not respected yet.

issue #5743

Now there is an ACL you can put in any ACL role to give access to the
 dashboard.
And all searches from the dashboard are checking ACL and returning info
 only on the data you are allowed to see.
Plugins providing a dashboard tab will have to be adapted as well

issue #5734

isuse #5732

Took code from webservice to include directly in objects class.
The point is to make sure objects::ls is not used to see attributes that
 the calling user is not allowed to see.
The same kind of check should be done for the attributes used in the
 filter.
Maybe a bypass should be added later to allow "admins" to use
 operational attributes and other LDAP attributes which does not match
 an ACL.

issue #5732