Description
Add a test to verify the API rejects incorrect rules. Also verify that frontend form validation works as expected.
Also add a backend test to verify that "All users/groups/network devices" override manually specified lists.
The validation should use the following rules:
- ACL must have at least one ALLOW setting configured; it can be one of the toggles (all users, all groups, all network devices) or a non-empty selection in at least one of the sections (users, groups, network devices)
- DENY configuration is optional
- the same object should not appear in both the ALLOW and DENY section
- (?) related "All" toggles should not be checked at once (for example both allow all users and deny all users)