diff options
| author | Russ Allbery <rra@stanford.edu> | 2007-09-18 23:40:37 +0000 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2007-09-18 23:40:37 +0000 |
| commit | 088e2ecba73fedebb0b7729a1f07022fd6155c22 (patch) | |
| tree | 2d55f924132d08cb1ebd56a5c482db5d855f9a47 /client | |
| parent | e435832256e0ba069b771e9bb350e749600efcd4 (diff) | |
Document the locked flag in the server backend and client man pages.
Document locked flag issues when implementing a new object type.
Diffstat (limited to 'client')
| -rw-r--r-- | client/wallet.pod | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/client/wallet.pod b/client/wallet.pod index a330b0a..263e623 100644 --- a/client/wallet.pod +++ b/client/wallet.pod @@ -111,6 +111,11 @@ Administrators can run any command on any object or ACL except for C<get> and C<store>. For C<get> and C<show>, they must still be authorized by either the appropriate specific ACL or the owner ACL. +If the locked flag is set on an object, no commands can be run on that +object that change data except the C<flags> commands, nor can the C<get> +command be used on that object. C<show>, C<getacl>, and C<owner> or +C<expires> without an argument can still be used on that object. + =over 4 =item acl add <id> <scheme> <identifier> |