]> git.michaelhowe.org Git - packages/o/openafs.git/commitdiff
doc: correct implicit ACL permissions volume owner
authorJeffrey Altman <jaltman@your-file-system.com>
Sun, 25 Mar 2012 13:56:48 +0000 (09:56 -0400)
committerDerrick Brashear <shadow@dementix.org>
Sun, 25 Mar 2012 18:51:22 +0000 (11:51 -0700)
OpenAFS changed the behavior of implicit administrator permission
for directory ownership.  In OpenAFS only the volume root directory
owner has implicit administrator permissions and they apply to all
directories in the volume not just those with matching ownership.

Change-Id: I8ca0a8874fe17cf7fc575107bd76efb5dc472b10
Reviewed-on: http://gerrit.openafs.org/6951
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Tested-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Reviewed-by: Derrick Brashear <shadow@dementix.org>
doc/xml/AdminGuide/auagd020.xml
doc/xml/UserGuide/auusg007.xml

index f016b737194c80d9115e14e34d13a39e9f9cdb7b..61c5c2dad260b68c0a67dbe88bd9a8aaf7e27e50 100644 (file)
               <term><emphasis role="bold">The a (administer) permission</emphasis></term>
 
               <listitem>
-                <para>This permission enables a user to change the directory's ACL. Members of the <emphasis
-                role="bold">system:administrators</emphasis> group implicitly have this permission on every directory (that is, even
-                if that group does not appear on the ACL). Similarly, the owner of a directory implicitly has this permission on its
-                ACL and those of all directories below it that he or she owns. <indexterm>
+                <para>This permission enables a user to change the directory's ACL. Members of the
+                    <emphasis role="bold">system:administrators</emphasis> group implicitly have
+                  this permission on every directory (that is, even if that group does not appear on
+                  the ACL). Similarly, the owner of a volume root directory implicitly has this
+                  permission on its ACL and those of all directories within the volume. <indexterm>
                     <primary>administer ACL permission</primary>
-
-                    <secondary></secondary>
-
+                    <secondary/>
                     <see>a ACL permission</see>
-                  </indexterm> <indexterm>
+                  </indexterm>
+                  <indexterm>
                     <primary>a ACL permission</primary>
+                  </indexterm><indexterm>
+                    <primary>implicit ACL permissions</primary>
                   </indexterm></para>
               </listitem>
             </varlistentry>
index a6f74586dd069ffbeff44001fef7f7805a8831e2..6c47f2cbd6bf5a31a1a23f3ba592b44ece69e841 100644 (file)
             <term><emphasis role="bold">The a (administer) permission</emphasis></term>
 
             <listitem>
-              <para>This permission enables a user to change the directory's ACL. Members of the <emphasis
-              role="bold">system:administrators</emphasis> group implicitly have this permission on every directory (that is, even
-              if that group does not appear on the ACL). Similarly, the owner of a directory implicitly has this permission on its
-              ACL and those of all directories below it. <indexterm>
+              <para>This permission enables a user to change the directory's ACL. Members of the
+                  <emphasis role="bold">system:administrators</emphasis> group implicitly have this
+                permission on every directory (that is, even if that group does not appear on the
+                ACL). Similarly, the owner of a volume root directory implicitly has this permission
+                on its ACL and those of all directories within the volume. <indexterm>
                   <primary>administer ACL permission</primary>
-                </indexterm> <indexterm>
+                </indexterm><indexterm>
+                  <primary>implicit ACL permissions</primary>
+                </indexterm>
+                <indexterm>
                   <primary>a ACL permission</primary>
                 </indexterm></para>
             </listitem>