From f565ed2e3262e4ee72689a51d181629ec011d2b7 Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@your-file-system.com>
Date: Sun, 25 Mar 2012 09:56:48 -0400
Subject: [PATCH] doc: correct implicit ACL permissions volume owner

OpenAFS changed the behavior of implicit administrator permission
for directory ownership.  In OpenAFS only the volume root directory
owner has implicit administrator permissions and they apply to all
directories in the volume not just those with matching ownership.

Reviewed-on: http://gerrit.openafs.org/6951
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Tested-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Reviewed-by: Derrick Brashear <shadow@dementix.org>
(cherry picked from commit 95ec152a850c0cde33829481b8e71e7e7e686a58)

Change-Id: I390e11fcf64b7cdb192e49e0967b7890e831ea45
Reviewed-on: http://gerrit.openafs.org/6954
Reviewed-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Tested-by: Jeffrey Altman <jaltman@secure-endpoints.com>
---
 doc/xml/AdminGuide/auagd020.xml | 20 +++++++++++---------
 doc/xml/UserGuide/auusg007.xml  | 14 +++++++++-----
 2 files changed, 20 insertions(+), 14 deletions(-)

diff --git a/doc/xml/AdminGuide/auagd020.xml b/doc/xml/AdminGuide/auagd020.xml
index 7b279ebb0..d862be3fb 100644
--- a/doc/xml/AdminGuide/auagd020.xml
+++ b/doc/xml/AdminGuide/auagd020.xml
@@ -309,17 +309,19 @@
               <term><emphasis role="bold">The a (administer) permission</emphasis></term>
 
               <listitem>
-                <para>This permission enables a user to change the directory's ACL. Members of the <emphasis
-                role="bold">system:administrators</emphasis> group implicitly have this permission on every directory (that is, even
-                if that group does not appear on the ACL). Similarly, the owner of a directory implicitly has this permission on its
-                ACL and those of all directories below it that he or she owns. <indexterm>
+                <para>This permission enables a user to change the directory's ACL. Members of the
+                    <emphasis role="bold">system:administrators</emphasis> group implicitly have
+                  this permission on every directory (that is, even if that group does not appear on
+                  the ACL). Similarly, the owner of a volume root directory implicitly has this
+                  permission on its ACL and those of all directories within the volume. <indexterm>
                     <primary>administer ACL permission</primary>
-
-                    <secondary></secondary>
-
+                    <secondary/>
                     <see>a ACL permission</see>
-                  </indexterm> <indexterm>
+                  </indexterm>
+                  <indexterm>
                     <primary>a ACL permission</primary>
+                  </indexterm><indexterm>
+                    <primary>implicit ACL permissions</primary>
                   </indexterm></para>
               </listitem>
             </varlistentry>
@@ -1701,4 +1703,4 @@
       </listitem>
     </itemizedlist>
   </sect1>
-</chapter>
\ No newline at end of file
+</chapter>
diff --git a/doc/xml/UserGuide/auusg007.xml b/doc/xml/UserGuide/auusg007.xml
index 2408f976f..0fcf5010a 100644
--- a/doc/xml/UserGuide/auusg007.xml
+++ b/doc/xml/UserGuide/auusg007.xml
@@ -192,12 +192,16 @@
             <term><emphasis role="bold">The a (administer) permission</emphasis></term>
 
             <listitem>
-              <para>This permission enables a user to change the directory's ACL. Members of the <emphasis
-              role="bold">system:administrators</emphasis> group implicitly have this permission on every directory (that is, even
-              if that group does not appear on the ACL). Similarly, the owner of a directory implicitly has this permission on its
-              ACL and those of all directories below it. <indexterm>
+              <para>This permission enables a user to change the directory's ACL. Members of the
+                  <emphasis role="bold">system:administrators</emphasis> group implicitly have this
+                permission on every directory (that is, even if that group does not appear on the
+                ACL). Similarly, the owner of a volume root directory implicitly has this permission
+                on its ACL and those of all directories within the volume. <indexterm>
                   <primary>administer ACL permission</primary>
-                </indexterm> <indexterm>
+                </indexterm><indexterm>
+                  <primary>implicit ACL permissions</primary>
+                </indexterm>
+                <indexterm>
                   <primary>a ACL permission</primary>
                 </indexterm></para>
             </listitem>
-- 
2.39.5