diff options
| author | Fredrik Luthander <fredrik.luthander@sonyericsson.com> | 2011-11-08 01:42:19 +0100 |
|---|---|---|
| committer | Martin Fick <mfick@codeaurora.org> | 2011-12-28 12:34:17 -0700 |
| commit | d996088829dc80235efbb5f33b1c8bb29f7a9f00 (patch) | |
| tree | 66b1054324c8155d3c6608f4b744e0434a973f19 | |
| parent | d0bc9e56927275538ce57200fdc1a8280f1c0995 (diff) | |
Access control documentation: capabilities
Adds general information about global capabilities, how the server
ownership is administered.
Change-Id: Id34eca1e92d25b9e0bfdd30fb14a1d880497ca48
Signed-off-by: Fredrik Luthander <fredrik.luthander@sonyericsson.com>
| -rw-r--r-- | Documentation/access-control.txt | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/Documentation/access-control.txt b/Documentation/access-control.txt index 4212fd4e86..6aec6520e0 100644 --- a/Documentation/access-control.txt +++ b/Documentation/access-control.txt @@ -254,7 +254,6 @@ would be needed: |Foo Leads |refs/heads/qa |Code Review| -2..+2 |===================================================== - OpenID Authentication ~~~~~~~~~~~~~~~~~~~~~ @@ -272,14 +271,16 @@ is automatically inherited by every other project in the same Gerrit instance. These rights can be seen, but not modified, in any other project's `Access` administration tab. -Only members of the group `Administrators` may edit the access -control list for `All-Projects`. +Only members of the groups with the `Administrate Server` capability +may edit the access control list for `All-Projects`. By default this +capability is given to the group `Administrators`, but can be given +to more groups. Ownership of this project cannot be delegated to another group. This restriction is by design. Granting ownership to another group gives nearly the same level of access as membership in `Administrators` does, as group members would be able to alter -permissions for every managed project. +permissions for every managed project including global capabilities. Per-Project ~~~~~~~~~~~ |