mirror of
https://git.proxmox.com/git/pve-docs
synced 2025-06-14 13:01:54 +00:00
move inheritance section / remove redundant general text
As inheritance is a property of paths, so it makes sense to make them a subsection of them. The permissions paragraph in what used to be a 'terms and definitions' section now doesn't fit in and is redundant now that there's a general introduction paragraph.
This commit is contained in:
parent
b8eeec5219
commit
a8b13bd9c7
14
pveum.adoc
14
pveum.adoc
@ -309,20 +309,6 @@ Some examples are:
|
|||||||
* `/access/realms/{realmid}`: Administrative access to realms
|
* `/access/realms/{realmid}`: Administrative access to realms
|
||||||
|
|
||||||
|
|
||||||
Permissions
|
|
||||||
~~~~~~~~~~~
|
|
||||||
|
|
||||||
Permissions are the way we control access to objects. In technical
|
|
||||||
terms they are simply a triple containing `<path,user,role>`. This
|
|
||||||
concept is also known as access control lists. Each permission
|
|
||||||
specifies a subject (user or group) and a role (set of privileges) on
|
|
||||||
a specific path.
|
|
||||||
|
|
||||||
When a subject requests an action on an object, the framework looks up
|
|
||||||
the roles assigned to that subject (using the object path). The set of
|
|
||||||
roles defines the granted privileges.
|
|
||||||
|
|
||||||
|
|
||||||
Inheritance
|
Inheritance
|
||||||
^^^^^^^^^^^
|
^^^^^^^^^^^
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user