Thread:Extension talk:LDAP Authentication/Use AD group to limit editing