Hello,
I'm learning a lot using Galene.  Thanks.  I've been experimenting with creating groups programmatically using the REST admin interface.

In particular I tried to create a group using PUT method with JSON body and it works fine for simple groups like:
{"op": [{"username": "elmer", "password": "1234567"}],"presenter": [{}], "public": true}

But if I include a "users" list or a "wildcard-user" value, it fails with a "description is not sanitized" error. For example this body fails:
{"op": [{"username": "elmer", "password": "1234567"}],"presenter": [{}], "public": false, "users":{"john": {"password": "260530", "permissions": "present"},"fred": {"password": "940934", "permissions": "present"}}}

I commented out the 3 lines of UpdateDescription() in description.go, recompiled, and I was able to make this group just fine using the API.

if desc.Users != nil || desc.WildcardUser != nil || desc.AuthKeys != nil {
        return errors.New("description is not sanitised")
}

Why is this "sanitized" check existing in UpdateDescription().  It seems relevant only for displaying group properties.

-Marty