Add privilege checks for creation/deletion of users.

1 files changed, 7 insertions, 0 deletions

diff --git a/gn_libs/privileges/system.py b/gn_libs/privileges/system.py
index 85e62f9..fa96f2d 100644
--- a/gn_libs/privileges/system.py
+++ b/gn_libs/privileges/system.py
@@ -16,3 +16,10 @@ def can_link_data(system_privileges: tuple[str, ...]) -> bool:
 def can_masquerade(system_privileges: tuple[str, ...]) -> bool:
     """Check whether the user is allowed to masquerade as a different user."""
     return check("(AND system:user:masquerade)", system_privileges)
+
+
+def can_create_or_delete_user(system_privileges: tuple[str, ...]) -> bool:
+    """Check whether user is allowed to link data to user groups."""
+    return check("(AND system:user:list system:user:edit "
+                 "     system:user:create-user system:user:create-user)",
+                 system_privileges)