From c381d4b1511a187ce8da9429d79dda4b1869eff6 Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@your-file-system.com>
Date: Sun, 25 Mar 2012 09:56:48 -0400
Subject: [PATCH] doc: correct implicit ACL permissions volume owner

OpenAFS changed the behavior of implicit administrator permission
for directory ownership.  In OpenAFS only the volume root directory
owner has implicit administrator permissions and they apply to all
directories in the volume not just those with matching ownership.

Reviewed-on: http://gerrit.openafs.org/6951
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Tested-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Reviewed-by: Derrick Brashear <shadow@dementix.org>
(cherry picked from commit 95ec152a850c0cde33829481b8e71e7e7e686a58)

Change-Id: I33fd24db250ef03a60f7f24853715e6f76d297a8
Reviewed-on: http://gerrit.openafs.org/6952
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Tested-by: Jeffrey Altman <jaltman@secure-endpoints.com>
---
 doc/xml/AdminGuide/auagd020.xml | 20 +++++++++++---------
 doc/xml/UserGuide/auusg007.xml  | 14 +++++++++-----
 2 files changed, 20 insertions(+), 14 deletions(-)

diff --git a/doc/xml/AdminGuide/auagd020.xml b/doc/xml/AdminGuide/auagd020.xml
index 7b279ebb0..d862be3fb 100644
--- a/doc/xml/AdminGuide/auagd020.xml
+++ b/doc/xml/AdminGuide/auagd020.xml
@@ -309,17 +309,19 @@
               <term><emphasis role="bold">The a (administer) permission</emphasis></term>
 
               <listitem>
-                <para>This permission enables a user to change the directory's ACL. Members of the <emphasis
-                role="bold">system:administrators</emphasis> group implicitly have this permission on every directory (that is, even
-                if that group does not appear on the ACL). Similarly, the owner of a directory implicitly has this permission on its
-                ACL and those of all directories below it that he or she owns. <indexterm>
+                <para>This permission enables a user to change the directory's ACL. Members of the
+                    <emphasis role="bold">system:administrators</emphasis> group implicitly have
+                  this permission on every directory (that is, even if that group does not appear on
+                  the ACL). Similarly, the owner of a volume root directory implicitly has this
+                  permission on its ACL and those of all directories within the volume. <indexterm>
                     <primary>administer ACL permission</primary>
-
-                    <secondary></secondary>
-
+                    <secondary/>
                     <see>a ACL permission</see>
-                  </indexterm> <indexterm>
+                  </indexterm>
+                  <indexterm>
                     <primary>a ACL permission</primary>
+                  </indexterm><indexterm>
+                    <primary>implicit ACL permissions</primary>
                   </indexterm></para>
               </listitem>
             </varlistentry>
@@ -1701,4 +1703,4 @@
       </listitem>
     </itemizedlist>
   </sect1>
-</chapter>
\ No newline at end of file
+</chapter>
diff --git a/doc/xml/UserGuide/auusg007.xml b/doc/xml/UserGuide/auusg007.xml
index 2408f976f..0fcf5010a 100644
--- a/doc/xml/UserGuide/auusg007.xml
+++ b/doc/xml/UserGuide/auusg007.xml
@@ -192,12 +192,16 @@
             <term><emphasis role="bold">The a (administer) permission</emphasis></term>
 
             <listitem>
-              <para>This permission enables a user to change the directory's ACL. Members of the <emphasis
-              role="bold">system:administrators</emphasis> group implicitly have this permission on every directory (that is, even
-              if that group does not appear on the ACL). Similarly, the owner of a directory implicitly has this permission on its
-              ACL and those of all directories below it. <indexterm>
+              <para>This permission enables a user to change the directory's ACL. Members of the
+                  <emphasis role="bold">system:administrators</emphasis> group implicitly have this
+                permission on every directory (that is, even if that group does not appear on the
+                ACL). Similarly, the owner of a volume root directory implicitly has this permission
+                on its ACL and those of all directories within the volume. <indexterm>
                   <primary>administer ACL permission</primary>
-                </indexterm> <indexterm>
+                </indexterm><indexterm>
+                  <primary>implicit ACL permissions</primary>
+                </indexterm>
+                <indexterm>
                   <primary>a ACL permission</primary>
                 </indexterm></para>
             </listitem>
-- 
2.39.5