Add several CRUD default permissions

Add missing Add, Modify, Removedefault permissions to:
- automountlocation (Add/Remove only; locations have
   no data to modify)
- privilege
- sudocmdgroup (Modify only; the others were present)

Related to: https://fedorahosted.org/freeipa/ticket/4346

Reviewed-By: Martin Kosek <mkosek@redhat.com>

ipalib/plugins/automount.py

@@ -212,6 +212,7 @@ class automountlocation(LDAPObject):
     default_attributes = ['cn']
     label = _('Automount Locations')
     label_singular = _('Automount Location')
+    permission_filter_objectclasses = ['nscontainer']
     managed_permissions = {
         'System: Read Automount Configuration': {
             # Single permission for all automount-related entries
@@ -226,6 +227,14 @@ class automountlocation(LDAPObject):
                 'automountmapname', 'description',
             },
         },
+        'System: Add Automount Locations': {
+            'ipapermright': {'add'},
+            'default_privileges': {'Automount Administrators'},
+        },
+        'System: Remove Automount Locations': {
+            'ipapermright': {'delete'},
+            'default_privileges': {'Automount Administrators'},
+        },
     }
 
     takes_params = (