add: Ability to specify which group can use individual admin console items

docs/changelog/7.x.x.txt

@@ -102,6 +102,7 @@
  - fix: javascript errors in SQL Form date inputs in IE
  - Added optional parameters for DatabaseLinks so that users can setup their
    database's with things like LongReadLen, etc.
+ - Added ability to restrict admin console items to specific groups.
 
 7.3.22
  - fix: relative links sent out in emails don't work properly

docs/upgrades/upgrade_7.3.22-7.4.0.pl

@@ -37,9 +37,50 @@ addCanStartThreadToCS($session);
 addPostCaptchaToCS($session);
 addFieldsToDatabaseLinks($session);
 addWikiAttachments($session);
+addAdminConsoleGroupSettings($session);
 
 finish($session); # this line required
 
+#-------------------------------------------------
+# Add the default admin console group settings
+sub addAdminConsoleGroupSettings {
+    my $session     = shift;
+    print "\tAdding default admin console group settings... " unless $quiet;
+
+    my %groupDefaults  = ( 
+        groupIdAdminActiveSessions      => 3,
+        groupIdAdminAdSpace             => 3,
+        groupIdAdminCache               => 3,
+        groupIdAdminCommerce            => 3,
+        groupIdAdminCron                => 3,
+        groupIdAdminDatabaseLink        => 3,
+        groupIdAdminGraphics            => 3,
+        groupIdAdminGroup               => 3,
+        groupIdAdminGroupAdmin          => 11,
+        groupIdAdminHelp                => 7,
+        groupIdAdminLDAPLink            => 3,
+        groupIdAdminLoginHistory        => 3,
+        groupIdAdminProductManager      => 14,
+        groupIdAdminProfileSettings     => 3,
+        groupIdAdminReplacements        => 3,
+        groupIdAdminSpectre             => 3,
+        groupIdAdminStatistics          => 3,
+        groupIdAdminSubscription        => 3,
+        groupIdAdminTransactionLog      => 3,
+        groupIdAdminUser                => 3,
+        groupIdAdminUserAdd             => 11,
+        groupIdAdminVersionTag          => 12,
+        groupIdAdminWorkflow            => 'pbgroup000000000000015',
+        groupIdAdminWorkflowRun         => 3,
+    );
+    
+    for my $setting (keys %groupDefaults) {
+        $session->setting->add($setting, $groupDefaults{$setting});
+    }
+
+    print "DONE!\n" unless $quiet;
+}
+
 #-------------------------------------------------
 
 sub addWikiAttachments {