External Users

The user has the rights of a public user execpt it can never create a project, group, or team. Also it cant view internal projects.

Partially fix for both #4009 (closed) and #13938 (closed) (except the LDAP sync or a pattern to detect external users)