[horde] Translation update & Negative Permissions

[Ralf Lang]

Hello,

1) Translation update

The horde/core and horde/base repos have received an upgraded PO Template
and a German translation update. If you use php-fpm you will have to
restart/reload your running php-fpm to get the updated translations loaded
after updating horde.

During this activity I noticed some need for changes in our
horde-translation tool. This does not affect manual translators who use the
gettext utilities without horde-translation.

2) New feature: Negative Permissions

This is something which has been asked for a lot of times over the years.
Previously if you enabled a capability for "all authenticated users" you
could not deny it for a specific user or group. As I could not finish this
work before stable release I decided to gate it behind a feature switch
which is off by default. If you want to use negative permissions, the
horde/base app configuration screen now has a new toggle under the
"permissions" tab. It defaults to the traditional additive-only permissions
system to not surprise users.

The logic flows similar to the old model:
For every matrix (SHOW READ EDIT DELETE) or boolean (on/off)  permission
you can choose between "grant", "no rule" and "deny". The grant rule works
like in the old model - a grant for all users and no rules for your
group(s) or user name implies you get the permission. A grant for a group
you are in but no rule for all users or you specifically means you get the
permission. But now you can specifically single out certain groups or users
from a generally granted permission. Let your machine user not have access
to IMP. Let your contractor not have access to some resources you normally
share among employees.

The new permissions system also comes with a small touchup of the
permissions admin screen - we needed some new knobs after all to express
the new capabilities and I could not fit them into the old UI without
touching many places at once. By default you will see the old UI.

Don't like the new permissions UI? Send your suggestions on better user
experience or improved wording.

3) Some improvements to activesync and caldav sync

Torben has several improvements to ActiveSync support based on user
feedback ready for release.

The new release is expected this evening.