sudo roles: added "not before", "not after" and order

lam/HISTORY

@@ -3,6 +3,7 @@ June 2014 4.6
   - Extended LAM's internal password policies
   - LAM Pro:
    -> Password self reset and user self registration support to set a header text
+   -> Sudo roles: support latest schema
 
 
 18.03.2014 4.5

lam/docs/manual-sources/howto.xml

@@ -5761,8 +5761,28 @@ OK (10 msec)</programlisting>
       <para>You can manage your sudo roles in LDAP if you have installed the
       sudo-ldap package or <ulink
       url="http://www.sudo.ws/sudo/readme_ldap.html">compiled sudo with LDAP
-      support</ulink>. To activate sudo management in LAM Pro edit your server
+      support</ulink>.</para>
-      profile and add the type "Sudo roles".</para>
+
+      <para>To activate sudo management in LAM Pro edit your server profile
+      and add the type "Sudo roles".</para>
+
+      <screenshot>
+        <mediaobject>
+          <imageobject>
+            <imagedata fileref="images/sudoRole1.png" />
+          </imageobject>
+        </mediaobject>
+      </screenshot>
+
+      <screenshot>
+        <mediaobject>
+          <imageobject>
+            <imagedata fileref="images/sudoRole2.png" />
+          </imageobject>
+        </mediaobject>
+      </screenshot>
+
+      <para>Now you can create sudo commands.</para>
 
       <screenshot>
         <mediaobject>