# Begin of the insertioncceptanceEnd of the insertion Begin of the deletion AcceptanceEnd of the deletion criteria

## Permissions and IDM

The permissions for the individual applications and modules are centrally defined in LDAP groups. They are synced with OpenProject with the existing LDAP group sync developed for City of Cologne. This allows us to set global permissions in OpenProject, e.g. whether a user has permissions on a cloud storage provider such as Nextcloud. We need this information in different places like the main menu and in the work packages view, e.g. to decide whether we offer users to save attachments in Nextcloud.

* [ ] Create global permissions for the individual applications
* [ ] Check/adapt seed data

## Frontend

* [ ] Add icons left to each menu item
* [ ] Check spacings, margins etc.
* [ ] Move the existing modules menu to the left
* [ ] Move the icon to the left
* [ ] Remove the hamburger icon to open and close the sidebar
* [ ] Add group headers to the menu
* [ ] Move the project selector to the left
* [ ] Move the add icon to the left

# Visual

<img class="op-uc-image op-uc-image_inline" Begin of the insertionsrc="/api/v3/attachments/40550/content">End of the insertion Begin of the deletion src="/api/v3/attachments/39258/content">End of the deletion