From 8e09455211cf45cb6676407b747834b206284b32 Mon Sep 17 00:00:00 2001
From: Frederick Muriuki Muriithi
Date: Wed, 26 Aug 2026 12:09:03 -0500
Subject: Add privilege checks for creation/deletion of users.

---
 gn_libs/privileges/system.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/gn_libs/privileges/system.py b/gn_libs/privileges/system.py
index 85e62f9..fa96f2d 100644
--- a/gn_libs/privileges/system.py
+++ b/gn_libs/privileges/system.py
@@ -16,3 +16,10 @@ def can_link_data(system_privileges: tuple[str, ...]) -> bool:
 def can_masquerade(system_privileges: tuple[str, ...]) -> bool:
     """Check whether the user is allowed to masquerade as a different user."""
     return check("(AND system:user:masquerade)", system_privileges)
+
+
+def can_create_or_delete_user(system_privileges: tuple[str, ...]) -> bool:
+    """Check whether user is allowed to link data to user groups."""
+    return check("(AND system:user:list system:user:edit "
+                 "     system:user:create-user system:user:create-user)",
+                 system_privileges)
-- 
cgit 1.4.1