This is an automated email from the ASF dual-hosted git repository.
smckinney pushed a commit to branch FC-265
in repository https://gitbox.apache.org/repos/asf/directory-fortress-enmasse.git
The following commit(s) were added to refs/heads/FC-265 by this push:
new d1f7610 Describe arbac02 checks
d1f7610 is described below
commit d1f761017c4fd425bd8c90090db77dfad4872a6a
Author: Shawn McKinney <smckinney@apache.org>
AuthorDate: Sat Mar 16 10:20:37 2019 -0500
Describe arbac02 checks
---
README.md | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/README.md b/README.md
index dfa6c0d..2b0d34b 100644
--- a/README.md
+++ b/README.md
@@ -414,11 +414,11 @@ In describing a range of roles, begin range is the lowest descendant
in the chai
Some example ranges that can be derived:
-a. [A, CTO] is the full set: {CTO, ENG, QC, E1, E2, Q1, Q2, DA, QA, A}.
-b. (A, CTO) is the full set, minus the endpoints: {ENG, QC, E1, E2, Q1, Q2, DA, QA}.
-c. [A, ENG] includes: {A, DA, E1, E2, ENG}
-d. [A, ENG) includes: {A, DA, E1, E2}
-etc...
+ * [A, CTO] is the full set: {CTO, ENG, QC, E1, E2, Q1, Q2, DA, QA, A}.
+ * (A, CTO) is the full set, minus the endpoints: {ENG, QC, E1, E2, Q1, Q2, DA, QA}.
+ * [A, ENG] includes: {A, DA, E1, E2, ENG},
+ * [A, ENG) includes: {A, DA, E1, E2}.
+ * etc...
So, for an administrator to be able to target a role in one of the specified APIs above,
at least one of their activated admin roles must pass the role range test. There are currently
two roles
created by the security policy in this project, that are excluded from this type of check:
|