Thread:Extension talk:LDAP Authentication/Controlling edit rights by AD group?