Merge pull request #233 from ReCodEx/fix-users-acl

Fixing ACLs for users.

Author: Martin Kruliš

app/config/permissions.neon

@@ -114,15 +114,22 @@ permissions:
 
     - allow: true
       resource: group
+      role: supervisor-student
       actions:
-          - addStudent
-          - removeStudent
           - viewExercises
           - viewStats
           - viewStudentStats
           - viewPublicDetail
       conditions: group.isSupervisor
 
+    - allow: true
+      resource: group
+      role: supervisor
+      actions:
+          - addStudent
+          - removeStudent
+      conditions: group.isSupervisor
+
     - allow: true
       resource: group
       actions:
@@ -189,6 +196,7 @@ permissions:
         - viewGroups
         - viewDetail
         - viewList
+        - viewAll
 
     - allow: true
       role: student
@@ -239,6 +247,14 @@ permissions:
           - viewDetail
       conditions: user.isSupervisorOfJoinedGroup
 
+    - allow: true
+      role: supervisor
+      resource: user
+      actions:
+          - viewDetail
+          - viewAll
+
+
 
     ##########################
     # Assignment permissions #